Http://www.google.com/wo0dh3ad

Re:Http://www.google.com/wo0dh3ad by _b8r0 on Friday January 07, 2011 @06:58AM (#2079307)

The simple answer for small repressive governments is to block the HTTPS login form so you have to fall back to HTTP. ATI has complete control of all Internet access in Tunisia. You're just not going to get through them unless you can find a way through.

In some countries I work in we routinely come across censorship and all kinds of dodgy goings on, so we have a variety of tunnelling methods (VPN, SSH, ICMPTX, DNSTX, Tor and a few non-public tunnelling options). For the most part as long as you can terminate a connection in somewhere you're fairly comfortable with you're better off.

Also don't make the mistake of feeling that the US, UK or EU are automatically comfortable options. It all depends what you're doing with the data. A little common sense goes a long way.

[ Parent | on HN ]

Re:Http://www.google.com/wo0dh3ad by wladimir on Friday January 07, 2011 @08:07AM (#2079412)

Of course, governments can completely block port 443, but that will make so many internet sites unusable they could just as well completely pull the plug.

And with 'HTTPS everywhere', I also mean removing the HTTP fallback. Fallbacks to plaintext (that can be triggered by a MITM) are indeed obvious backdoors that should be avoided in any protocol.

[ Parent | on HN ]

Re:Http://www.google.com/wo0dh3ad by SimplePast on Friday January 07, 2011 @08:07AM (#2079413)

Correct ! Facebook https is already blocked !

[ Parent | on HN ]