5 ms·
With ssl the best they can do is this host level blocking unless they perform mitm attacks.
by hueving 10y ago
With ssl the best they can do is this host level blocking unless they perform mitm attacks.
- metachris 10y ago> unless they perform mitm attacks Which any state-sponsored actor can easily do, of course.
- MichaelGG 10y agoPlease tell me how Turkey is going to MITM Google on a recurring basis, enough to implement filtering.
- bumblebeard 10y agoBy using a CA they control to generate a fake certificate for Google like they've already "accidentally" done: http://arstechnica.com/security/2013/01/turkish-government-agency-spoofed-google-certificate-accidentally/ http://arstechnica.com/security/2013/01/turkish-government-a...
- gruez 10y agoWhich they can only pull off once before their CA is distrusted. See: how Chinese government CA was restricted to .cn domains only