Hacker GitHub

← All repos

dsekz/chrome-x-browser-validation-header

View on GitHub ↗ ★ 335 Python

Reverse engineering and generation toolkit for Chrome's private x-browser-validation header, used for integrity.

6 mentions on Hacker News by 4 people: 2 stories, 4 comments · first 2025-07-11 · latest 2025-10-21

Mentions per year 6 mentions · busiest year 2025 (6)
20082026
  1. …authenticates your browser via the Chrome validation header [0]. Remote attestation, anyone? [0]: https://github.com/dsekz/chrome-x-browser-validation-header
  2. …X-Browser-Validation header reverse engineered https://news.ycombinator.com/item?id=44527739 [2] https://github.com/dsekz/chrome-x-browser-validation-header
  3. …each installation? I'm not sure how you got that impression. It's generated from fixed constants. https://github.com/dsekz/chrome-x-browser-validation-header?...
  4. ▲ 3
    Chrome's hidden X-Browser-Validation header reverse engineered
    story by dsekz · 2025-07-11 · 0 comments
  5. …and figured out how the x-browser-validation header is generated. Full write up and PoC code here: https://github.com/dsekz/chrome-x-browser-validation-header Why do you think Chrome bothers with this extra headers. Anti-spoofing, bot…
  6. ▲ 380
    Chrome's hidden X-Browser-Validation header reverse engineered
    story by dsekz · 2025-07-11 · 129 comments