Content tagged tls

How to capture TLS fingerprints at the CloudFront edge, route them through a serverless pipeline, and query them in Athena — using a CloudFront Function, a bash Lambda, SNS, Firehose, and S3.

User-Agent strings are trivially forged. TLS handshakes are not. How JA4 fingerprinting combined with ASN classification exposes distributed scraper clusters that look exactly like real browsers.