4 ms·
> The user registers a random domain as the "shadow" domain, for example: shadow.com. We assume the censor won't block this newly registered domain. Can’t the
by RcouF1uZ4gsC 6y ago
> The user registers a random domain as the "shadow" domain, for example: shadow.com. We assume the censor won't block this newly registered domain.
Can’t the censor get a list of all registered domains and check if they end up serving the same content as a censored site. This seems like something that a dedicated censored should be able to pretty easily.
In addition, don’t most domain registrars require some sort of payment and thus some type of identifying information? For those ones, the censoring authority can use that to track down who registered this shadow domain. The censoring authority can also block domains from registrars that allow anonymous/pseudonymous registration.
- ignoramous 6y agoMost censors employ the cheapest possible firewall solution for their blockades. And those, more often than not, involve merely blocking DNS requests. DoH (and DoT to a lesser extent) mitigate censorship to an extent. Censoring HTTP/S connections by inspecting SNI (server name identification) field is prevalent, but it is defeated by clients like GreenTunnel and GetIntra.Org that split the SNI carrying packet in to two. A stateful (read: expensive) firewall can defeat this technique, but not many use it. And anyway, in this game of cat and mouse, Lantern and Psiphon, the two VPNs, have been faring admirably well.
- luckylion 6y ago> Can’t the censor get a list of all registered domains and check if they end up serving the same content as a censored site. This seems like something that a dedicated censored should be able to pretty easily. For some TLDs, yes (e.g. .com), but others (e.g. Germany's .de) don't make their zonefiles available.