News for hackers. Stuff that matters.

A comment on Fastmail accounts blocked in Russia, here's what we know. Parent comment

Re:Fastmail accounts blocked in Russia, here's what we know by vbezhenar on Wednesday June 09, 2021 @09:52AM (#27447812)
> I wonder if the fastmail protocol could be hidden in AWS-like data streams to take an approach like telegram. If they try to block it, they shut down their entire digital business infrastructure.

As long as server name sent in cleartext in SNI, blocking any website is trivial. Telegram uses a different approach with multitude of proxy servers and dynamic proxy changes via Apple/Google push messages. It's not applicable to an ordinary website.

If/when encrypted SNI is widely implemented, it might work.

[ Parent | on HN ]
Re:Fastmail accounts blocked in Russia, here's what we know by patrakov on Wednesday June 09, 2021 @01:01PM (#27450316)
> If/when encrypted SNI is widely implemented, it might work.

No. China is already blocking all connections with encrypted SNI. If such services become popular or make the encrypted SNI mandatory, then the choice will be to either install a government MITM certificate or not use the internet at all.

[ Parent | on HN ]
Re:Fastmail accounts blocked in Russia, here's what we know by vbezhenar on Wednesday June 09, 2021 @02:23PM (#27451286)
My point is that right now Russia does not have to choose between blocking entire CDN or allowing all websites. Unencrypted SNI allows to selectively block some websites while keeping CDN for other websites untouched.

Russia's situation is far from China, AFAIK.

[ Parent | on HN ]