4 ms·
Surely, they can't be MITMing HTTPS traffic without Cloudflare's blessing? Services not being available by region, that can be a bummer but that's not really a
by actuator 6y ago
Surely, they can't be MITMing HTTPS traffic without Cloudflare's blessing?
Services not being available by region, that can be a bummer but that's not really a problem on internet service provider as such.
Also, I am surprised that one more country is building a GFW.
- cmeacham98 6y agoThey can still do it, you'll just get a cert error. Also, if you're using a phone provided by them they could preload a CA they control.
- actuator 6y agoThat's interesting, I wonder if iOS/Android phones in China do something similar. I would be really surprised if Apple allows this.
- deleted 6y ago[deleted]
- judge2020 6y agoThere are a lot of reports of certificate issues (on Cloudflare) in Pakistan as well as Iran, with most of them likely because of censorship. https://community.cloudflare.com/search?q=Pakistan https://community.cloudflare.com/search?q=Pakistan https://community.cloudflare.com/search?q=Iran https://community.cloudflare.com/search?q=Iran
- Deathmax 6y agoIt would be possible for an ISP to MITM the traffic between Cloudflare and the origin server since it can be configured to be done via unencrypted HTTP or non-trusted certs on HTTPS (flexible SSL). See https://medium.com/@karthikb351/airtel-is-sniffing-and-censoring-cloudflares-traffic-in-india-and-they-don-t-even-know-it-90935f7f6d98 https://medium.com/@karthikb351/airtel-is-sniffing-and-censo... for an example of Cloudflare serving a MITM notice page for pirate bay.
- amingilani 6y agoYes, that or they just cut the connection to the origin entirely.
- partyboy 6y ago> surprised that one more country is building a GFW Likely helped by China too, considering it's Pakistan
- IA21 6y agoI would've bet money if Pakistan starts building a GFW, it would be with china's help but no, they bought equipment for this from an american company called Sandvine.