3 ms·
For dns blocks, DNS over HTTPS should work Firefox supports it, or you could run a local DNS resolver, or use host file for domains that you use and are blocke
by manquer 8y ago
For dns blocks, DNS over HTTPS should work Firefox supports it, or you could run a local DNS resolver, or use host file for domains that you use and are blocked.
Also I am not even sure it is possible to intercept any traffic over VPN without having the keys, so not sure why tunneling over VPN is a problem , DPI and MITM techniques are not even used by the Chinese government for the most part and people can generally VPN out if they want to.
- Ayesh 8y agoOpenVPN runs on HTTPS port, and I suppose it's hard to block without DPI. If the VPN runs on a known port like various other VPN protocols do, it should be trivial to block those connections.
- stordoff 8y agoFor clarity, the HTTPS were in the clear. Only DNS traffic was over the VPN, to ensure I got an untampered DNS result (and I later verified that hosts files do not help either). You can obviously VPN out, I was just curious how the system was implemented (as the typical advice of change your DNS provider does not help).