News for hackers. Stuff that matters.

A comment on Wikipedia’s Switch to HTTPS Has Successfully Fought Government Censorship. Parent comment

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by SomeStupidPoint on Monday May 29, 2017 @08:39PM (#14442335)
But can't they just download the Wikipedia backup, purge the articles they don't like, and redirect the DNS lookup to a local copy?

To the average citizen, it won't look much different than going to actual Wikipedia.

[ Parent | on HN ]
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by FreeFull on Monday May 29, 2017 @08:46PM (#14442371)
This is feasible, assuming the government is willing to pay for the hosting.
[ Parent | on HN ]
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by kijin on Monday May 29, 2017 @10:08PM (#14442646)
As well as forge an SSL certificate for *.wikipedia.org.

Last time I checked, Wikipedia had HSTS enabled. So trying to forge their DNS without also forging their SSL certificate would be equivalent to total censorship for anybody who has previously visited Wikipedia.

[ Parent | on HN ]
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by gjjrfcbugxbhf on Tuesday May 30, 2017 @08:42AM (#14444850)
Assuming the government in question has access to a root certificate this should be possible.
[ Parent | on HN ]
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by sqeaky on Tuesday May 30, 2017 @11:22AM (#14445979)
Even presuming it is possible, it still raises the cost of censorship. Simply raising that cost is a good thing.
[ Parent | on HN ]