Thai government to MITM all internet communications

Re:Thai government to MITM all internet communications by ikeboy on Monday May 30, 2016 @02:29PM (#11802448)

Is there a way to leverage such access into secure browsing? Some kind of "secure https" over "mitm https", where they only see the encrypted layer even with their mitm access?

[ Parent | on HN ]

Re:Thai government to MITM all internet communications by matthewaveryusa on Monday May 30, 2016 @07:20PM (#11803759)

You can go over a VPN. I use the VPN my corporation provides as I deem them trustworthy. Before this I used an AWS EC2 instance and did a poor man's VPN using sshuttle[1] . I've also done it using sshuttle to a NAS I have sitting in my living room.

[1] http://www.unixmen.com/sshuttle-poor-mans-vpn-ssh/

[ Parent | on HN ]

Re:Thai government to MITM all internet communications by geomark on Monday May 30, 2016 @08:19PM (#11803907)

When you connect to a VPN doesn't it do key exchange in the same way as making a https connection to a website? They would just MITM that as well, right?

[ Parent | on HN ]

Re:Thai government to MITM all internet communications by Natanael_L on Monday May 30, 2016 @03:09PM (#11802588)

You can easily do double tunneling, sure. Or even tunnel over DNS. Or over ping packets.

[ Parent | on HN ]