4 ms·
What is DPI equipment? I’m not familiar with the acronym.
by _iyig 8y ago
What is DPI equipment? I’m not familiar with the acronym.
- gresrun 8y agoDeep Packet Inspection [0] [0]: https://en.wikipedia.org/wiki/Deep_packet_inspection https://en.wikipedia.org/wiki/Deep_packet_inspection
- krackers 8y agoDoesn't TLS defeat this?
- MrOwen 8y agoNot necessarily. You are correct in that you can't look at the literal messages inside the packets anymore but you can make educated assumptions based on usage patterns and packet sizes combined with data that's already in the header. Just take a look at this almost 3 year old submission detailing someone's experience with the Great Firewall: https://news.ycombinator.com/item?id=10905076 https://news.ycombinator.com/item?id=10905076 Since that was 3 years ago, I suspect there's much more advanced network wizardry available today.
- TeMPOraL 8y agoI.e. side channels. There are side channels for everything. And if you don't care about precision that much - e.g. you're willing to filter out anything even remotely resembling the actual thing you're after - then TLS isn't going to be a hard problem.
- wil421 8y agoNo, the DPI box or another network box should be the one that is actually sending the cert. You are only exchanging a cert with DPI and then the DPI will send it’s cert to your destination. The client must trust the DPI cert for it to work.
- lallysingh 8y agoIIRC Iran throttled TLS connections to ridiculously slow rates to discourage their use.
- baroffoos 8y agoThe government can just block all encrypted connections. Either switch to unencrypted or enjoy no internet.
- MrOwen 8y agoI believe that is "deep packet inspection". So looking at the contents of a packet rather than just the information found in the header. Pretty sure the Great Firewall makes extensive use of DPI to restrict its citizen's internet freedoms.
- deleted 8y ago[deleted]