How to implement transfer of MAC address over SSL connection?

Question

Iron

1) Many sites work via https, is it possible to implement a MAC address request from a site visitor through this protocol?
2) With the scheme of operation of 5 computers + one router with wi-fi, does this same router have 1 MAC address, and is it viewed by all applications from the outside? Or each individual MAC address of each individual computer is visible

Answer 1

1) According to browser security policies, it will not be possible to obtain the visitor's mac address (with some exceptions). The maximum way to do this is to use a Java applet that first requests permission from the user. Do you really need to know the mac address?
2) The poppy address of the first node from the server will be visible. Those. if the scheme is as follows: computer-router-server, then the server will see the MAC address of the router. If there are more nodes between the router and the server, then the server will see the mac address of the nearest one.

Answer 2

Considering that the MAC is used only to the nearest node, it is completely incomprehensible why you need to know it anywhere else (by the way, I recommend googling about ARP). Furthermore. In OSI, this is at the second, data link layer, i.e. even below IP. Therefore, in the context of the web, I can’t imagine a real task at all in which a MAC is required. If this is an attempt to control the number of connected clients for subscription services there, then it is fundamentally wrong to enter from the MAC. In general, I would like the author to voice in the context of what he had this question.

Answer 3

Here the client STB itself transmits the poppy to the server in the HTTP request.
In general, an IP packet does not contain a MAC address field, it's none of his business. So, you can find out the client's MAC via HTTP/HTTPS/any protocol of the IP level and above only by politely asking the client application and hoping that it has such information and agrees to give it away. The browser does not have such information, so “the visitor of the site” does not, and it is not necessary. MAC addresses can easily match for entire series of Chinese motherboards, it has been verified repeatedly.

Answer 4

I want to add that we have a Middleware (for IPTV) that authorizes set-top boxes (STB) by MAC address. Client STBs are located in different AS, cities, etc., but through the API of the browser built into the set-top box, they grab the MAC and transfer it to the server. So you can find a way to transfer the MAC. But yes, as mentioned above, there will most likely be problems with security settings.

Answer 5

Excuse me, but why do you need the MAC address of the network adapter?
and the second - on my machine - a car of interfaces - several ethernet, wifi, a bunch of virtual machine interfaces, a hypervisor, loopback adapters. You, uh, which one to give away? :)
A friend's TV can do wifi, eth is also a question.
Well, they already said above that the MAC address of the adapter will not go further than the first router. and VPN connections have always been point to point, and I don’t remember such a concept being used there at all

Answer 6

2) You ask the client for the MAC address, so each individual MAC will be visible.