News for hackers. Stuff that matters.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by samcheng on Monday May 29, 2017 @07:39PM (#14442102)
If a censor can't tell which specific parts of wikipedia someone is trying to access, then they will be more likely to simply block the entire site.

HTTPS encrypts the URL and the content, but does not mask the DNS lookup nor the server being connected to.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by enzolovesbacon on Monday May 29, 2017 @07:46PM (#14442136)
Yes, I understand that. I mean, why don't these censors block the whole wikipedia.org access then?

If they don't want their population to access a Wikipedia topic/article and can't block/determine if someone is accessing it, the easiest thing to do would be just block it right away. So why they won't do it?

(PS: I'm in no way in favor of censorship, I'm just trying to understand such mindset)

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by hannob on Monday May 29, 2017 @07:57PM (#14442166)
If you censor too much people may be pissed. It's much easier to decide "we censor specific articles about specific subjects" than "we censor all of wikipedia". Censoring a popular mainstream webpage may cause too much opposition. Maybe even the politicians who make the decision and their families like to look up things on wikipedia.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by jasonkostempski on Monday May 29, 2017 @08:48PM (#14442381)
Then https will force them to either extreme which I think is a good thing. No option to slowly raise the temperature so the frogs won't jump out of the pot.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by SomeStupidPoint on Monday May 29, 2017 @08:39PM (#14442335)
But can't they just download the Wikipedia backup, purge the articles they don't like, and redirect the DNS lookup to a local copy?

To the average citizen, it won't look much different than going to actual Wikipedia.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by FreeFull on Monday May 29, 2017 @08:46PM (#14442371)
This is feasible, assuming the government is willing to pay for the hosting.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by kijin on Monday May 29, 2017 @10:08PM (#14442646)
As well as forge an SSL certificate for *.wikipedia.org.

Last time I checked, Wikipedia had HSTS enabled. So trying to forge their DNS without also forging their SSL certificate would be equivalent to total censorship for anybody who has previously visited Wikipedia.

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by gjjrfcbugxbhf on Tuesday May 30, 2017 @08:42AM (#14444850)
Assuming the government in question has access to a root certificate this should be possible.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by sqeaky on Tuesday May 30, 2017 @11:22AM (#14445979)
Even presuming it is possible, it still raises the cost of censorship. Simply raising that cost is a good thing.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by Bakary on Monday May 29, 2017 @08:48PM (#14442383)
They are currently creating a Wikipedia clone in China so I'm guessing they are allowing wikipedia only on a temporary basis.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by foota on Monday May 29, 2017 @07:56PM (#14442164)
Probably because they recognize the utility of Wikipedia.
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by mirimir on Monday May 29, 2017 @08:22PM (#14442270)
As with GitHub.