News for hackers. Stuff that matters.

A comment on Improving DNS Privacy with Oblivious DoH. Parent comment

Re:Improving DNS Privacy with Oblivious DoH by ignoramous on Tuesday December 08, 2020 @09:01AM (#25345151)
You can bypass SNI inspection [0] with tools like GreenTunnel [1] and Intra [2].

[0] https://twitter.com/vinifortuna/status/1304189371688660992

[1] https://news.ycombinator.com/item?id=22654737

[2] https://getintra.org/

[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by darkwater on Tuesday December 08, 2020 @10:26AM (#25346405)
Thanks for the link, just tried Green Tunnel on the use case where my ISP is blocking me and just managed to change the error from PT_CONNECT_RESET_ERROR to PR_END_OF_FILE_ERROR.

Side note, looks like that if installed by snap on Ubuntu 20.10 it cannot automagically change the proxy configuration in Gnome

  green-tunnel:system-proxy [SYSTEM PROXY] error on SetProxy   (Error: Command failed: gsettings set org.gnome.system.proxy mode manual
  green-tunnel:system-proxy /bin/sh: 1: gsettings: not found
Enabling proxy manually makes it work but yet, it doesn't circumvent my ISP filtering :(
[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by ignoramous on Monday December 21, 2020 @06:23PM (#25500956)
Does Intra work?
[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by d3nj4l on Tuesday December 08, 2020 @09:13AM (#25345321)
I can't find any source on intra working to prevent SNI sniffing. The page itself only mentions DNS, and Googling doesn't reveal any other source for that.

E: NVM, found it. It does like it uses split hellos.

[ Parent | on HN ]