News for hackers. Stuff that matters.

A comment on Wikipedia’s Switch to HTTPS Has Successfully Fought Government Censorship. Parent comment

Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by kijin on Monday May 29, 2017 @10:08PM (#14442646)
As well as forge an SSL certificate for *.wikipedia.org.

Last time I checked, Wikipedia had HSTS enabled. So trying to forge their DNS without also forging their SSL certificate would be equivalent to total censorship for anybody who has previously visited Wikipedia.

[ Parent | on HN ]
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by gjjrfcbugxbhf on Tuesday May 30, 2017 @08:42AM (#14444850)
Assuming the government in question has access to a root certificate this should be possible.
[ Parent | on HN ]
Re:Wikipedia’s Switch to HTTPS Has Successfully Fought Gover... by sqeaky on Tuesday May 30, 2017 @11:22AM (#14445979)
Even presuming it is possible, it still raises the cost of censorship. Simply raising that cost is a good thing.
[ Parent | on HN ]