Re:How to keep your ISP’s nose out of your browser history w...
by vbezhenar on Sunday April 08, 2018 @05:10PM
(#16788440)
There's nothing good about breaking DPI. Instead of blocking a single site you'll end up blocking entire IP address. I'd even suggest an optional extension of HTTPS which allows to put entire URL as unencrypted part of the request. Censorship systems usually block content by individual pages. Currently with HTTPS it's not possible to block individual page, so an entire website is blocked.
[ Parent
| on HN ]
Re:How to keep your ISP’s nose out of your browser history w...
by jakobdabo on Sunday April 08, 2018 @05:17PM
(#16788474)
TLS and HTTP are different things. TLS is being used without HTTP in lots of cases.
Besides, even if such extension had existed it would've been easy to write X in TLS header and Y in the HTTP payload to circumvent the ban, like the domain fronting[1] trick currently being used by e.g. Signal.
Re:How to keep your ISP’s nose out of your browser history w...
by Franciscouzo on Sunday April 08, 2018 @05:14PM
(#16788457)
That would be such a bad idea, lots of websites send data that should be secret on the query parameters.
Re:How to keep your ISP’s nose out of your browser history w...
by aaomidi on Monday April 09, 2018 @02:54AM
(#16790957)
Services like google share IPs amongs their services. If SNI was encrypted, youtube.com could not be blocked unless the entire IP space of google is blocked (which would be very hard to do since nearly everyone relies on gmail).
Re:How to keep your ISP’s nose out of your browser history w...
by vbezhenar on Monday April 09, 2018 @03:31PM
(#16796176)
Kazakhstan blocked major part of gmail functionality at one point of time. You couldn't download attachments, images didn't work, may be something else. I think they tried to block blogspot. but shared IP broke gmail. It was broken for months, nobody really cared except people pointlessly ranting on forums. Those, who needed working email, migrated to other providers or used proxy. I'd like to live in the world without censorship but I don't see this happening, so I'd prefer to minimize censorship damage at least.