News for hackers. Stuff that matters.

A comment on Russia Bans 1.8M Amazon and Google IPs in Attempt to Block Telegram. Parent comment

Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by icebraining on Tuesday April 17, 2018 @07:05AM (#16857209)
Wait, assuming they're using TLS and certificate-pinning, the DPI shouldn't be able to read the HTTP headers at all. How does that work?
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by fehyjn on Tuesday April 17, 2018 @07:26AM (#16857318)
That’s right, but basically dpi sends tcp reset in case of https or 302 redirect in case of http before target server response, since it’s located nearer. There’s a tool to bypass this, so you can read more there. https://github.com/ValdikSS/GoodbyeDPI
[ Parent | on HN ]
Re:Russia Bans 1.8M Amazon and Google IPs in Attempt to Bloc... by gbil on Tuesday April 17, 2018 @07:43AM (#16857396)
If I'm not mistaken use of SNI reveals the target in plain text, big discussion these days with DNS over TLS etc.
[ Parent | on HN ]