JA3

securitycryptography

Stands for: JA3 TLS client fingerprint

A fingerprint of a TLS client built from the fields in its ClientHello.

JA3 hashes a set of ClientHello fields - TLS version, cipher list, extensions - into a short signature (an MD5 hash) that often identifies the client software or malware family, regardless of IP. JA4 is its more robust successor.

Also known as: ja3, JA3 fingerprint

← All glossary entries