News for hackers. Stuff that matters.

A comment on The cost of 1GB of mobile data in 228 countries (Feb 2020). Parent comment

Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by actuator on Saturday August 22, 2020 @07:30PM (#24248158)
Surely, they can't be MITMing HTTPS traffic without Cloudflare's blessing?

Services not being available by region, that can be a bummer but that's not really a problem on internet service provider as such.

Also, I am surprised that one more country is building a GFW.

[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by Deathmax on Saturday August 22, 2020 @07:59PM (#24248328)
It would be possible for an ISP to MITM the traffic between Cloudflare and the origin server since it can be configured to be done via unencrypted HTTP or non-trusted certs on HTTPS (flexible SSL). See https://medium.com/@karthikb351/airtel-is-sniffing-and-censo... for an example of Cloudflare serving a MITM notice page for pirate bay.
[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by amingilani on Saturday August 22, 2020 @10:37PM (#24249097)
Yes, that or they just cut the connection to the origin entirely.
[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by cmeacham98 on Saturday August 22, 2020 @07:33PM (#24248175)
They can still do it, you'll just get a cert error. Also, if you're using a phone provided by them they could preload a CA they control.
[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by actuator on Saturday August 22, 2020 @07:38PM (#24248196)
That's interesting, I wonder if iOS/Android phones in China do something similar. I would be really surprised if Apple allows this.
[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by judge2020 on Saturday August 22, 2020 @07:55PM (#24248293)
There are a lot of reports of certificate issues (on Cloudflare) in Pakistan as well as Iran, with most of them likely because of censorship.

https://community.cloudflare.com/search?q=Pakistan

https://community.cloudflare.com/search?q=Iran

[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by partyboy on Saturday August 22, 2020 @10:58PM (#24249177)
> surprised that one more country is building a GFW

Likely helped by China too, considering it's Pakistan

[ Parent | on HN ]
Re:The cost of 1GB of mobile data in 228 countries (Feb 2020) by IA21 on Monday August 24, 2020 @06:36AM (#24259292)
I would've bet money if Pakistan starts building a GFW, it would be with china's help but no, they bought equipment for this from an american company called Sandvine.
[ Parent | on HN ]