> what is stopping an oppressive regime from building tech specifically designed to block Handshake? It runs over https so it would be difficult to distinguish

> what is stopping an oppressive regime from building tech specifically designed to block Handshake? It runs over https so it would be difficult to distinguish between a legitimate https packet and a handshake one, you would need to do deep packet inspection which is difficult. Being distributed it uses multiple ips lots, these ips change lots, this is called churn and keeping track of it is a problem for distributed systems. The swarm is segmented and the segments are usually randomised to the individual for better distribution this is supposed to make it difficult to get all the ips to ban them all but easy to get at least one unbanned ip. > Oppressive regimes will adapt. Yes they will but they will have to publicly invest significant money and years of time into a project that can only be used for censorship. > And DNS as it stands is fairly seizure resistant as long as -sic- the customer services folks don’t get tricked into resetting your account or something. This happens constantly, its probably the biggest security issue that faces dns, just phone up some level 1 tech and grab yourself a new domain.