News for hackers. Stuff that matters.

A comment on Why TCP Over TCP Is a Bad Idea (2001). Parent comment

Re:Why TCP Over TCP Is a Bad Idea (2001) by droopyEyelids on Saturday March 28, 2015 @10:49PM (#9283685)
Do you have any idea why the GFW blocks UDP by default? I can imagine that for corporate networks, but as far as I know, uninspectable UDP streams only recently came into existence with Google's QUIC (which assumes pre-negotiated encryption keys are still valid)

Why block all streams if you can inspect them (or at least their handshake)?

[ Parent | on HN ]
Re:Why TCP Over TCP Is a Bad Idea (2001) by duskwuff on Saturday March 28, 2015 @11:42PM (#9283786)
Probably because they determined that most of it was VPN or other encrypted traffic, and that blocking it was easier than trying to inspect it.
[ Parent | on HN ]
Re:Why TCP Over TCP Is a Bad Idea (2001) by beefsack on Sunday March 29, 2015 @02:02AM (#9284058)
While practically no official information exists publicly, this appears to be the reason. My gut tells me that the lack of structure in UDP makes it a little harder to inspect too.
[ Parent | on HN ]