JA4+ explainer

---

What JA4+ explainer actually does

The authors' own component-by-component explanation of what each part of a JA4 fingerprint encodes, which is the document that turns the format from a string into something you can reason about.

What can and cannot be measured about JA4+ explainer

This entry has no repository, so none of the usual repository fields exist for it — no push date, no release tag, no archive flag, no licence identifier. Its state comes from one measurement only: the register requested the address and recorded what came back. Anything in the range 200 to 399 makes a non-repository entry ACTIVE, and that clause is the one the first edition of the rubric did not have at all, which is why documentation entries carried no state under it.

Read that for exactly what it is. It says the thing is reachable. It does not say the documentation matches the shipped product, because no HTTP status can carry that. Where a stronger signal exists — a repository, a version, a dated revision — this register prefers it, and where one does not, it prints the weaker signal and names it as weak rather than dressing it up.

Where JA4+ explainer sits in this catalogue

JA4+ explainer is filed in section 07, network, tls & http fingerprint tooling, whose scope is this: The layer below JavaScript: TLS ClientHello and HTTP/2 fingerprinting, impersonating clients, and the passive tooling that reads them. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.

Filed beside it in the same section: azuretls-client (SEMI), JA4+ (ACTIVE), JA3 (Salesforce) (ARCHIVED). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.

There is no licence field, because there is no source to licence — this is a documentation rather than a code repository. It is grouped instead with every other entry the rubric marks ACTIVE, which is the axis that actually distinguishes entries of this kind from one another.

What to settle before you adopt JA4+ explainer

Read it alongside the implementation rather than instead of it, since the spec and the code have both moved since the format was announced. It is written by the format's owners, which makes it authoritative about intent.