End-to-End encryption with SNI proxy on top of a TCP multiplexer
SniTun provides end-to-end encrypted proxy operations backed by a session
management framework. It utilizes a Fernet token, generated by the session
master, to enable secure communication between clients and servers. The
library facilitates challenge-response mechanisms to validate client
authenticity through AES/CBC encryption. It features a multiplexer protocol
that distributes data over a single TLS connection, supporting efficient
management and routing of multiple TCP streams. Connections are verified using
a SHA256 hash-based challenge, ensuring that data integrity and client
identity are maintained throughout the session. Additionally, it allows
external devices to establish secure end-to-end SSL connections by defining
specific endpoints in the communication flow.
