3 ms·

Can we, endpoints outside Kazakhstan, detect when a MITM client is connected and serve a boiler plate message "Untrusted connection"? If enough high level site

by yholio 7y ago

Can we, endpoints outside Kazakhstan, detect when a MITM client is connected and serve a boiler plate message "Untrusted connection"? If enough high level sites do this (Google, Cloudflare, Wikipedia etc) it might force the hand of the government since they are the ones effectively breaking the internet.

arpa 7y ago
No, mitm is not easily detected on server side. It's a transparent proxy. You could start serving these messages to whole KZ ip range, though.
- arpa 7y ago
  If someone could enlighten me where i'm wrong, it'd be much more constructive than simply downvoting.
  - knd775 7y ago
    https://blog.cloudflare.com/monsters-in-the-middleboxes/ https://blog.cloudflare.com/monsters-in-the-middleboxes/ https://mitm.watch https://mitm.watch
    - arpa 7y ago
      Thank you. An interesting technique, but ultimately very easily bypassed with minor effort on interceptors' behalf.
benjojo12 7y ago
Yes, https://blog.cloudflare.com/monsters-in-the-middleboxes/ https://blog.cloudflare.com/monsters-in-the-middleboxes/