3 ms·
> I wonder if the fastmail protocol could be hidden in AWS-like data streams to take an approach like telegram. If they try to block it, they shut down their en
by vbezhenar 5y ago
> I wonder if the fastmail protocol could be hidden in AWS-like data streams to take an approach like telegram. If they try to block it, they shut down their entire digital business infrastructure.
As long as server name sent in cleartext in SNI, blocking any website is trivial. Telegram uses a different approach with multitude of proxy servers and dynamic proxy changes via Apple/Google push messages. It's not applicable to an ordinary website.
If/when encrypted SNI is widely implemented, it might work.
- patrakov 5y ago> If/when encrypted SNI is widely implemented, it might work. No. China is already blocking all connections with encrypted SNI. If such services become popular or make the encrypted SNI mandatory, then the choice will be to either install a government MITM certificate or not use the internet at all.
- vbezhenar 5y agoMy point is that right now Russia does not have to choose between blocking entire CDN or allowing all websites. Unencrypted SNI allows to selectively block some websites while keeping CDN for other websites untouched. Russia's situation is far from China, AFAIK.