News for hackers. Stuff that matters.

A comment on Investigating TLS Blocking in India. Parent comment

Re:Investigating TLS Blocking in India by justDankin on Monday September 28, 2020 @03:28AM (#24613934)
TLS1.3 + ESNI is a robust solution, Firefox has the option of enabling it.

Cloudflare has a great page which allows to check this https://www.cloudflare.com/en-gb/ssl/encrypted-sni/

[ Parent | on HN ]
Re:Investigating TLS Blocking in India by ignoramous on Monday September 28, 2020 @06:39AM (#24615190)
A couple of problems:

1. ESNI isn't a standard yet. So, support in mainstream web-clients is lacking.

2. Unfortunately, TLS v1.3 is blocked in countries with stringent censorship already.

[ Parent | on HN ]
Re:Investigating TLS Blocking in India by Santosh83 on Monday September 28, 2020 @07:36AM (#24615525)
Wait what?? TLS 1.3 is blocked by some countries? As more and more of the Web, especially CDNs move to TLS 1.3, won't these countries be effectively crippling the Net for their citizens?

Also ESNI needs server support I believe and very few servers support it. Right now it is effective only for sites fronted by Cloudflare if I'm not mistaken, and while that isn't a small number still its by no means the wider Net.

[ Parent | on HN ]
Re:Investigating TLS Blocking in India by fomine3 on Tuesday September 29, 2020 @01:53AM (#24624520)
China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI

https://www.zdnet.com/article/china-is-now-blocking-all-encr...

[ Parent | on HN ]
Re:Investigating TLS Blocking in India by LinuxBender on Monday September 28, 2020 @10:22AM (#24616874)
I would not be surprised if some countries started blocking all the known DoH resolvers as well.
[ Parent | on HN ]