> Why wouldn't it be possible to get a notification for HTTPs Because you need a valid certificate to break SSL connection. > How does manipulating the packet

> Why wouldn't it be possible to get a notification for HTTPs Because you need a valid certificate to break SSL connection. > How does manipulating the packet size help steer around the blocking? The filtering hardware looks for SNI field at specific offset. If you break packet into two it will let the packet through because it doesn't reassemble IP packets (probably because it would require more resources). > what the media coverage has been regarding the state HTTP filtering? When the law was discussed initially, I think somewhere around 2012, after large protests against falsifying parlament election results and Putin's third term, media explained that there is many illegal information on the net, for example, terrorists' sites, sites selling drugs, sites that promote homosexual relations or suicide among minors. So the government needs a law to protect children from this. Sometimes they also add that some western countries censor Internet access too. Several years later new causes to block sites were added, such as sites with pirated movies, casino sites, sites that allow to view blocked content or provide VPN services, or pages that call for an unauthorized rallies. It is somewhat ironical that when Ukraine blocked russian social networks, media explained how to bypass the block.