timamsk/sing-box
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove certificate_public_key_sha256 for naive

Browse Source
This commit is contained in:
世界
2025-12-19 17:32:55 +08:00
parent 932d3343e4
commit 5d160109f7
7 changed files with 94 additions and 194 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/configuration/outbound/naive.md
View File

@@ -105,7 +105,9 @@ QUIC congestion control algorithm.
TLS configuration, see [TLS](/configuration/shared/tls/#outbound).
Only `server_name`, `certificate`, `certificate_path`, `certificate_public_key_sha256` and `ech` are supported.
Only `server_name`, `certificate`, `certificate_path` and `ech` are supported.
Self-signed certificates change traffic behavior significantly, which defeats the purpose of NaiveProxy's design to resist traffic analysis, and should not be used in production.
### Dial Fields

4
docs/configuration/outbound/naive.zh.md
View File

@@ -105,7 +105,9 @@ QUIC 拥塞控制算法。
TLS 配置, 参阅 [TLS](/zh/configuration/shared/tls/#outbound)。
只有 `server_name`、`certificate`、`certificate_path`、`certificate_public_key_sha256` 和 `ech` 是被支持的。
只有 `server_name`、`certificate`、`certificate_path` 和 `ech` 是被支持的。
自签名证书会显著改变流量行为，违背了 NaiveProxy 旨在抵抗流量分析的设计初衷，不应该在生产环境中使用。
### 拨号字段