News for hackers. Stuff that matters.

A comment on MITM on HTTPS traffic in Kazakhstan. Parent comment

Re:MITM on HTTPS traffic in Kazakhstan by jedisct1 on Thursday July 18, 2019 @05:49PM (#20474238)
It's probably completely unrelated.

DoH is easy to block. They can look at SNI and cut DoH connections.

Being able to access all the content is far more valuable than hostnames.

[ Parent | on HN ]
Re:MITM on HTTPS traffic in Kazakhstan by mdhardeman on Thursday July 18, 2019 @06:11PM (#20474418)
We have E-SNI now, where SNI is encrypted. And you have DoH providers who'll use that.

And then massive CDNs will start to support it.

Some of them might even enable it, with encrypted SNI, on _every single listener on all of their IPs_.

DoH was designed to evolve into something nearly unblock able. Unless you active intercept 100%.

Which some people believed no one would pay up for or that it would be unscalable. This stuff only gets cheaper and easier.

[ Parent | on HN ]