3 ms·
Install the certificate, then route all your connections through a tunnel. Multiple options are available like openvpn, shuttle[1], etc.. [1] https://github.co
by atmosx 11y ago
Install the certificate, then route all your connections through a tunnel. Multiple options are available like openvpn, shuttle[1], etc..
[1] https://github.com/apenwarr/sshuttle/ https://github.com/apenwarr/sshuttle/
- airza 11y agoI assumed that they would refuse to serve traffic that they couldn't decrypt with this certificate.
- atmosx 11y agoThen let's obfuscate[1][2]! [1] https://www.usenix.org/system/files/conference/usenixsecurity15/sec15-paper-dyer.pdf https://www.usenix.org/system/files/conference/usenixsecurit... [2] https://www.torproject.org/projects/obfsproxy-instructions.html.en https://www.torproject.org/projects/obfsproxy-instructions.h...
- viraptor 11y agoNot all traffic relies on certificates. Not all traffic relies on known PKI structures. Most known protocols this doesn't apply to: ssh, various vpns.