News for hackers. Stuff that matters.

A comment on Petition to stop France from forcing browsers like Firefox to censor websites. Parent comment

Re:Petition to stop France from forcing browsers like Firefo... by pmontra on Thursday August 17, 2023 @11:26AM (#37163141)
The browser must send a request with a Host header with the correct site name or the server will 404 it.

What could work is a local proxy server that translates the host name in the request.

It must MITM the https requests though.

[ Parent | on HN ]
Re:Petition to stop France from forcing browsers like Firefo... by Joeri on Thursday August 17, 2023 @02:10PM (#37165771)
Is MITM even possible for HSTS preloaded websites?
[ Parent | on HN ]
Re:Petition to stop France from forcing browsers like Firefo... by johnchristopher on Thursday August 17, 2023 @02:30PM (#37166003)
What we want or would end up with is a Firefox plugin to toggle a boolean.
[ Parent | on HN ]
Re:Petition to stop France from forcing browsers like Firefo... by Zuiii on Thursday August 17, 2023 @11:58PM (#37171252)
> The browser must send a request with a Host header with the correct site name or the server will 404 it.

Only if you configured it that way. Most http servers have a "default" website which they will happly serve from if the Host header has no match. I expect these sites will continue to work just fine in firefox using the host file hack or via alternative DNS domains.

Unless they just want a foot-in-the-door law to make certain browsers illegal (to then expand on it later), blocking content at the terminal is not the way to do it. So so many ways to get around it.

[ Parent | on HN ]