Investigating TLS Blocking in India

Re:Investigating TLS Blocking in India by justDankin on Monday September 28, 2020 @03:19AM (#24613859)

I'm one of the authors of the post, we're trying to extend this work by crowdsourcing censorship measurements from different vantage points in India.

We've compiled these tests into an android app, please consider running it if you live in India and would like to contribute to the research :) https://play.google.com/store/apps/details?id=com.censorwatc...

It's completely anonymous, doesn't require any permissions, and does not store any user related information.

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by abtom on Monday September 28, 2020 @06:57AM (#24615293)

Great work man! Installed the app and ran the tests. If there is any way we can see the results do share.

From what I can see, there is no way to bypass the SNI filters without using a proxy/VPN of some sort. Do let me know you have any tips for it.

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by justDankin on Monday September 28, 2020 @07:34AM (#24615509)

Thanks for running it! We are in the data collection stage at this moment, will definitely be publishing our findings and releasing the data publicly.

P.S. Our previous paper talks about censorship in India, albeit the data is from just one vantage point https://arxiv.org/abs/1912.08590

As for circumvention, TLS 1.3 + ESNI + DoH should do the trick. Firefox has the capability to enable these options

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by abtom on Tuesday September 29, 2020 @09:15AM (#24627387)

I have enabled ESNI + DoH but most websites do not seem to support ESNI yet. VPN looks like the only option until then.

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by girishso on Monday September 28, 2020 @06:01AM (#24614940)

I’m from India, thanks for doing this.

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by amitheonlyone on Monday September 28, 2020 @04:17AM (#24614243)

Do i have to keep it installed or is it a one-off thing

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by justDankin on Monday September 28, 2020 @04:29AM (#24614315)

You can delete it after running. Each run on an (ISP, state) combination gives a new test point.

Thanks!

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by Santosh83 on Monday September 28, 2020 @04:38AM (#24614388)

Off-topic but I'm noticing that every comment of yours on this post shows up as greyed-out and 'dead' immediately after you post, within minutes. There's not enough time for people to downvote and in any case none of your comments are downvote-worthy. I've been 'vouching' for your comments so others can read them. Maybe something @dang can look into?

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by justDankin on Monday September 28, 2020 @04:45AM (#24614440)

I'm new to HN(3 months, low karma). Maybe that's the reason? Not sure what would be the correct way to "fix" this

Thanks for vouching!

[ Parent | on HN ]

Re:Investigating TLS Blocking in India by detaro on Monday September 28, 2020 @04:47AM (#24614449)

email the mods through the contact link in the footer. Probably some spam filter gone haywire.

[ Parent | on HN ]