Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
john-althouse authored Oct 20, 2023
1 parent e210f83 commit 13fb37f
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -86,13 +86,13 @@ Additional JA4+ methods are in the works...

## Licensing

All JA4+ methods are patent pending.

JA4: TLS Client Fingerprinting is open-source, BSD 3-Clause, same as JA3. This allows any company or tool currently utilizing JA3 to immediately upgrade to JA4 without delay.

JA4+, which includes JA4S, JA4L, JA4H, JA4X, JA4SSH, and all future additions, are licensed under the FoxIO License 1.1. This license is permissive for most use cases, including for academic and internal business purposes, but is not permissive for monetization. If, for example, a company would like to use JA4+ internally to help secure their own company, then that is permitted. If, for example, a vendor would like to implement JA4+ into one of their products, they would need to purchase an OEM license from us.

Open-source projects can implement JA4+ as long as they reference the FoxIO License as it pertains to JA4+. Projects can achieve this in different ways such as simply adding the license to a NOTICE file that is referenced in the license file, see [Arkime](https://github.com/arkime/arkime/blob/main/NOTICE) as an example. Or by calling JA4+ as a plugin residing within a separate repository.
All JA4+ methods are patent pending.

JA4+ can be implemented into open source tools by calling JA4+ as a plugin from a separate repository. We are working on building these plugins/modules for different open source tools so the community can more easily utilize JA4+ for free. It will take a while to get to all of them but we're working on it!

This licensing allows us to provide JA4+ to the world in a way that is open and easily usable by most, but also provides us with a way to fund continued support, research into new methods, and the development of the upcoming JA4 Database. We want everyone to have the ability to utilize JA4+ and are happy to work with vendors and open-source projects to help make that happen.

Expand Down

0 comments on commit 13fb37f

Please sign in to comment.