On: Understanding the recent DDoS attack against Read the Docs

[cute_boi]

isn't JA4 also useless because it is so easy to spoof tls. For eg. cycletls for nodejs etc..

[davidfischer → cute_boi]

It will probably be useless one day. In practice, it is still useful today though not for this attack.

[johneth → davidfischer]

There's also the JA4+ suite (https://github.com/FoxIO-LLC/ja4), in addition to standard JA4.