News for hackers. Stuff that matters.

A comment on Identifying Airtel middleboxes that censor HTTPS traffic. Parent comment

Re:Identifying Airtel middleboxes that censor HTTPS traffic by justDankin on Tuesday September 29, 2020 @08:09AM (#24626690)
Using the TTL, we figured out that the censor kicks in at the kth hop. This kth box belonged to Airtel.

If a box was censoring after Airtel, we would have received a clean response (ICMP timeout) at hop k as well. Of course, the TTL itself can change during the run, but that wouldn't happen for so many cases :)

[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by iso1631 on Tuesday September 29, 2020 @08:39AM (#24626982)
If you used an allowed domain name, did you get TTL expired messages back when using TTL=5/6/7/8?
[ Parent | on HN ]
Re:Identifying Airtel middleboxes that censor HTTPS traffic by justDankin on Tuesday September 29, 2020 @08:41AM (#24626990)
Yes, that was the case
[ Parent | on HN ]