Re:Browser Plug-In Punches a Hole in China’s Great Firewall
by rahimnathwani on Sunday November 22, 2015 @06:51AM
(#10609816)
"i fail to see how that's useful except for sites that _have_ a CDN cache."
It doesn't.
"And also, couldn't the firewall block those paths to the CDN cache directly (seeing as they do deep packet inspection) just as easily"
The paper addresses this: make an HTTPS connection to the CDN's edge server, and make a request. The GFW doesn't know the URI, so doesn't know whether you are accessing forbidden or legit content.
It doesn't.
"And also, couldn't the firewall block those paths to the CDN cache directly (seeing as they do deep packet inspection) just as easily"
The paper addresses this: make an HTTPS connection to the CDN's edge server, and make a request. The GFW doesn't know the URI, so doesn't know whether you are accessing forbidden or legit content.