New anti-censorship scheme could make it impossible to block individual sites

Re:New anti-censorship scheme could make it impossible to bl... by SoftwareMaven on Thursday August 11, 2011 @11:07AM (#2873178)

I know of at least one private university that MITMs every SSL connection. Doesn't seem lime it would be that hard to look for the Telex signature at that point.

Of course, the university is training everybody to click on "just trust this certificate", but that's a different issue.

[ Parent | on HN ]

Re:New anti-censorship scheme could make it impossible to bl... by pavel_lishin on Thursday August 11, 2011 @11:24AM (#2873240)

Which one? Seems like a huge breach of trust, not to mention probably illegal as hell. Why does the dean need to know my credit card number?

[ Parent | on HN ]

Re:New anti-censorship scheme could make it impossible to bl... by Vitaly on Thursday August 11, 2011 @01:38PM (#2873887)

Hmm, how exactly do you do that? Browsers are supposed to verify certificates

[ Parent | on HN ]

Re:New anti-censorship scheme could make it impossible to bl... by trotsky on Thursday August 11, 2011 @02:33PM (#2874132)

Just like enterprises, they get you to install their CA cert as a new trusted root and then they sign their own certs for each domain as they flow through. Corporate IT will just push it through AD or pre-configure it, I'd assume campus IT gets you to run an executable to install it. Since all the traffic will be signed by them you won't get very far without accepting their root.

[ Parent | on HN ]