Email Privacy Tester: TLS SNI watcher (FROM scratch, single binary)
7.6K
Watches the SNI hostname in incoming TLS handshakes and reports the requesting IP addresses to the Email Privacy Tester API. Capture uses a raw AF_PACKET socket with an in-kernel BPF filter, so the image is built FROM scratch and contains a single binary plus CA certificates. It handles IPv4 and IPv6, and reassembles ClientHellos split across TCP segments. It is one component of Email Privacy Tester, a self-hostable tool that tests email clients for privacy and security failures.
Needs host networking, CAP_NET_RAW and an ethernet interface named by IFACE.
sni-watcher/)Content type
Image
Digest
sha256:27c1018b1…
Size
8.9 MB
Last updated
2 months ago
docker pull grepular/ept3-sniPulls:
24
Sep 21 to Sep 27