DuckDuckGo coming back online in India following country-wide block

Re:DuckDuckGo coming back online in India following country-... by anonms-coward on Sunday July 05, 2020 @03:29PM (#23741196)

How does Jio do it? Would encrypted SNI help in thwarting that?

[ Parent | on HN ]

Re:DuckDuckGo coming back online in India following country-... by searchableguy on Sunday July 05, 2020 @05:21PM (#23742127)

I think it will on some supported sites. Enable the dns over https option in firefox.

Check the status here - https://www.cloudflare.com/ssl/encrypted-sni/

Your best bet would still be a vpn which will work on all the sites.

[ Parent | on HN ]

Re:DuckDuckGo coming back online in India following country-... by mukuz on Monday July 06, 2020 @07:11AM (#23746623)

Jio uses DNS sniffing and SNI blocking.

They monitor all DNS requests(no matter who provides the DNS server). So the solution is DNS over HTTPS.

The SNI method is a bit tricky. ESNI does prevent the blocking, but currently it’s rarely implemented by websites. One other solution is TCP fragmentation. Split the packet containing SNI into two. This prevents them from catching the whole URL mentioned in the SNI. Thus, they are unable to block it.

One such tool: https://github.com/SadeghHayeri/GreenTunnel

[ Parent | on HN ]