Whistleblower provides blocking orders for over 4000 websites in India

Re:Whistleblower provides blocking orders for over 4000 webs... by ivanbakel on Saturday June 27, 2020 @11:12AM (#23662328)

It's not a dumb question, since it's a natural assumption. But HTTPS - specifically HTTP over TLS - establishes the secure tunnel to the particular domain (reddit.com) first, and only then transmits elements of the HTTP protocol, such as the path, any query parameters, and so on.

I believe that TLS could be used (and is used) in combination with other protocols, which only require the domain to use for DNS. Everything after that in the URL bar is HTTP-only.

[ Parent | on HN ]

Re:Whistleblower provides blocking orders for over 4000 webs... by searchableguy on Saturday June 27, 2020 @11:15AM (#23662347)

DNS over https solves the problem of plain text DNS. Firefox already supports it. Also check more about ESNI since ISPs like jio employ SNI inspection to block sites - https://www.cloudflare.com/learning/ssl/what-is-encrypted-sn...

Cloudflare has a small demo which you can use to test your browser and learn more about specific parts - https://www.cloudflare.com/ssl/encrypted-sni/

[ Parent | on HN ]

Re:Whistleblower provides blocking orders for over 4000 webs... by ignoramous on Saturday June 27, 2020 @03:13PM (#23663924)

I use https://getintra.org on Android and point it to a recursive DoH resolver running on Cloudflare Workers (free tier has been more than enough for 3 devices worth of queries).

Quick tutorial from StackPath (much of it applies to Cloudflare Workers, too): https://news.ycombinator.com/item?id=19514791

[ Parent | on HN ]