4 ms·

In China, many mainstream websites are still HTTP-only. 99% of government websites are HTTP, including the ones you input very sensitive information into. No wo

In China, many mainstream websites are still HTTP-only. 99% of government websites are HTTP, including the ones you input very sensitive information into. No wonder black data market for any kind of records including medical, surveillance, tax etc. here is so well developed and cheap. Somehow, SSL certificates for CDNs cost around US$2000/year. Proprietary DNS extensions on Baidu, Alibaba, and Tencent clouds like 30x redirects do not work with HTTPS at all.

deleted 8y ago
[deleted]
PikachuEXE 8y ago
Which is why we need to enable HTTP for our China users (only) Hates that
- robin_reala 8y ago
  Does Let’s Ecrypt not work in China? Edit: was doing some reading and found this interesting post: https://vpnpick.com/chinas-wosign-ca-found-threaten-users-lets-encrypt-ca/ https://vpnpick.com/chinas-wosign-ca-found-threaten-users-le...
  - mstaoru 8y ago
    Let's Encrypt works in China, but not the best due to many older Android phones, Windows XP, and general love for IE (I can even see 7-8 sometimes) and QQ browser with also in less recent version does not support SNI.
exikyut 8y ago
1. Besides making HTTPS non-mandatory, what else can businesses do to try and attain/maintain a viable presence if they think they have something to offer that may not be antagonistic to the Chinese government? Run on local servers? (By "viable presence", I mean the ability to reach a small level of success and not only be known by those who have figured out how to successfully consistently break through the GFW, or been deemed eligible for a waiver) 2. I'm beginning to see the HTTPS thing as some kind of strategic war move on the part of the US, possibly 5 eyes, possibly other countries. I don't see it making things simpler, only more complicated (one example I can give is https://news.ycombinator.com/item?id=17540111 https://news.ycombinator.com/item?id=17540111 - it's a lot harder for me to analyze Web traffic within my own LAN now, I have to set up a machine capable of breaking HTTPS, then secure it well enough I'm still confident to do my banking/etc).
- windowsworkstoo 8y ago
  Re: China, just get an ICP. Aliyun will help you. You will need a Chinese business entity and some form of in country hosting but it’s not onerous

deleted 8y ago

[deleted]

PikachuEXE 8y ago

Which is why we need to enable HTTP for our China users (only) Hates that

robin_reala 8y ago
Does Let’s Ecrypt not work in China? Edit: was doing some reading and found this interesting post: https://vpnpick.com/chinas-wosign-ca-found-threaten-users-lets-encrypt-ca/ https://vpnpick.com/chinas-wosign-ca-found-threaten-users-le...
- mstaoru 8y ago
  Let's Encrypt works in China, but not the best due to many older Android phones, Windows XP, and general love for IE (I can even see 7-8 sometimes) and QQ browser with also in less recent version does not support SNI.

exikyut 8y ago

1. Besides making HTTPS non-mandatory, what else can businesses do to try and attain/maintain a viable presence if they think they have something to offer that may not be antagonistic to the Chinese government? Run on local servers? (By "viable presence", I mean the ability to reach a small level of success and not only be known by those who have figured out how to successfully consistently break through the GFW, or been deemed eligible for a waiver) 2. I'm beginning to see the HTTPS thing as some kind of strategic war move on the part of the US, possibly 5 eyes, possibly other countries. I don't see it making things simpler, only more complicated (one example I can give is https://news.ycombinator.com/item?id=17540111 https://news.ycombinator.com/item?id=17540111 - it's a lot harder for me to analyze Web traffic within my own LAN now, I have to set up a machine capable of breaking HTTPS, then secure it well enough I'm still confident to do my banking/etc).

windowsworkstoo 8y ago
Re: China, just get an ICP. Aliyun will help you. You will need a Chinese business entity and some form of in country hosting but it’s not onerous