3 ms·
Find an (allegedly) blocked website that is using CloudFlare and has TLS 1.3 enabled. In about:config set network.trr.mode=3, network.security.esni.enabled=tru
by tgragnato 7y ago
Find an (allegedly) blocked website that is using CloudFlare and has TLS 1.3 enabled.
In about:config set network.trr.mode=3, network.security.esni.enabled=true, security.OCSP.enabled=0, security.tls.version.max=4, security.tls.version.min=4.
Exit, open Firefox again; if the website loads, then your ISP is using a DPI middlebox.
- throwawaydoh 7y agoThank you. Unfortunately, I wasn't able to find a blocked site that has TLS 1.3 enabled. I checked 3 blocked sites after enabling the options you suggested. They were still blocked. I confirmed all 3 didn't have TLS 1.3 by testing them with ssllabs ssltest. All had results show TLS 1.3 as "No".
- tgragnato 7y agoExpected, without esni (which requires tls1.3) there’s no way to conceal the domain from the boxes. Or.. your ISP might be blocking the IPs. Remember to revert the settings to the original values.