News for hackers. Stuff that matters.
Re:Investigating TLS Blocking in India by httgp on Sunday September 27, 2020 @10:38PM (#24612420)
It isn’t clear from the article, but how do we circumvent this? Would a VPN work?
Re:Investigating TLS Blocking in India by ignoramous on Sunday September 27, 2020 @11:08PM (#24612591)
You can use https://getintra.org/ and its numerous forks to overcome censorship as implemented by Indian ISPs today.

Then there is Tor on Android https://guardianproject.info/apps/orbot/ and VPN services like https://getlantern.com/ and https://psiphon.ca/ that exclusively focus on anti-censorship measures. Check their privacy policies before committing to use them.

Re:Investigating TLS Blocking in India by justDankin on Monday September 28, 2020 @03:28AM (#24613934)
TLS1.3 + ESNI is a robust solution, Firefox has the option of enabling it.

Cloudflare has a great page which allows to check this https://www.cloudflare.com/en-gb/ssl/encrypted-sni/

Re:Investigating TLS Blocking in India by ignoramous on Monday September 28, 2020 @06:39AM (#24615190)
A couple of problems:

1. ESNI isn't a standard yet. So, support in mainstream web-clients is lacking.

2. Unfortunately, TLS v1.3 is blocked in countries with stringent censorship already.

Re:Investigating TLS Blocking in India by Santosh83 on Monday September 28, 2020 @07:36AM (#24615525)
Wait what?? TLS 1.3 is blocked by some countries? As more and more of the Web, especially CDNs move to TLS 1.3, won't these countries be effectively crippling the Net for their citizens?

Also ESNI needs server support I believe and very few servers support it. Right now it is effective only for sites fronted by Cloudflare if I'm not mistaken, and while that isn't a small number still its by no means the wider Net.

Re:Investigating TLS Blocking in India by fomine3 on Tuesday September 29, 2020 @01:53AM (#24624520)
China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI

https://www.zdnet.com/article/china-is-now-blocking-all-encr...

Re:Investigating TLS Blocking in India by LinuxBender on Monday September 28, 2020 @10:22AM (#24616874)
I would not be surprised if some countries started blocking all the known DoH resolvers as well.
Re:Investigating TLS Blocking in India by ShorsHammer on Monday September 28, 2020 @12:04AM (#24612848)
Shadowsocks has reliably worked for a long time in China, a country with arguably the best DPI capabilities on Earth.

Tor's pluggable transports also have been at this stuff for a long time.

The internet is for everyone.

Re:Investigating TLS Blocking in India by john4532452 on Monday September 28, 2020 @02:21AM (#24613519)
Just use tor browser. Its fast enough to be usable now.
Re:Investigating TLS Blocking in India by djsumdog on Sunday September 27, 2020 @10:40PM (#24612426)
Judging from the details, a Proxy/VPN to another nation should work.
Re:Investigating TLS Blocking in India by pacificleo12 on Sunday September 27, 2020 @11:07PM (#24612584)
Noob question : How is that effective if "SNI travels on the network in cleartext"
Re:Investigating TLS Blocking in India by alexmingoia on Sunday September 27, 2020 @11:24PM (#24612670)
SNI is part of the HTTPS request, which would travel through the encrypted VPN channel. All network traffic would travel through your VPN, which is encrypted. The other end of the VPN channel is in another country which doesn’t block the website.

Your computer <—-encrypted channel to VPN in other country—-> https communication to blocked website

What a country could do but we haven’t seen before, is block all VPN protocol traffic, effectively banning VPNs. This would be disruptive to business or politicians using VPN for privacy, so it’s not as politically feasible.

Re:Investigating TLS Blocking in India by Sophistifunk on Sunday September 27, 2020 @11:24PM (#24612672)
That's cleartext within your TCP/IP connection. If you use a VPN, that connection itself is encrypted.