3 ms·
It should be https-inside-https (or http2 or even plain TLS) scheme for multiple AWS IPs. A bit laggy but will do the job. Wildcard blocking of these would bre
by lngnmn 9y ago
It should be https-inside-https (or http2 or even plain TLS) scheme for multiple AWS IPs. A bit laggy but will do the job.
Wildcard blocking of these would break too many legitimate services, including banking, airlines, etc.
BTW, the task of DPI-ing of all https traffic on the operator side is intractable.
- topranks 9y agoYeah, like the ToR "meek" obfuscation method does. https://trac.torproject.org/projects/tor/wiki/doc/meek https://trac.torproject.org/projects/tor/wiki/doc/meek