{
  "port": 7123,
  "protocol": "tcp",
  "service": "SNIF relay control",
  "oneLiner": "Control connection for SNIF, an SNI-based end-to-end TLS forwarding relay.",
  "whatItIs": "IANA assigned 7123 to VESvault Corp in December 2021 as snif, referencing draft-zubov-snif section 4.3: the TCP port is the SNIF end-to-end TLS relay control connection, and the UDP registration covers the same relay over QUIC. SNIF lets a device behind NAT allocate a public hostname, obtain a publicly trusted certificate for it, and accept inbound TLS connections through a relay that forwards by SNI without ever holding the private key. A connector on the device keeps the control connection to the relay open; the relay is the side that listens on 7123.",
  "exposure": {
    "verdict": "fine",
    "note": "A SNIF relay is meant to be publicly reachable, and the design keeps the TLS private key on the end device so the relay only forwards ciphertext."
  },
  "checkCommand": "nc -vz TARGET 7123",
  "links": [
    {
      "title": "draft-zubov-snif — SNIF: SNI-based End-to-End TLS Forwarding",
      "url": "https://datatracker.ietf.org/doc/draft-zubov-snif/",
      "kind": "spec"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7123",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7123",
      "kind": "iana"
    }
  ]
}