TLS Fingerprinting: What Websites Know About You Before You Tell Them Anything

kept by solarisrift sep 08

TLS Forge captures and replays a real browser’s TLS, HTTP/1.1, HTTP/2, and header profile so automation tools match JA3/JA4 fingerprints and evade bot detection.

Zero-day CSS: CVE-2026-2441 exists in the wild
Google patched a high-severity use-after-free vulnerability in Chromium's CSS engine exploited in the wild as a zero-day.
also on Chromium, #browser-engineering, #security
Install web apps with the new HTML install element | Blog
The new HTML `<install>` element lets developers add a browser-trusted install button for web apps without JavaScript, now in origin trial for Chrome and Edge.
also on Chromium, #browser-engineering, #developer-tools
Cloudflare teams up with Chrome, Firefox, and Edge on a privacy-first anti-bot protocol
Cloudflare, Mozilla, Google, and Microsoft are developing PACT, a privacy-first protocol to verify web traffic legitimacy without tracking users.
also on Cloudflare, #browser-engineering, #security, #automation