3 ms·
> If/when encrypted SNI is widely implemented, it might work. No. China is already blocking all connections with encrypted SNI. If such services become popular
by patrakov 5y ago
> If/when encrypted SNI is widely implemented, it might work.
No. China is already blocking all connections with encrypted SNI. If such services become popular or make the encrypted SNI mandatory, then the choice will be to either install a government MITM certificate or not use the internet at all.
- vbezhenar 5y agoMy point is that right now Russia does not have to choose between blocking entire CDN or allowing all websites. Unencrypted SNI allows to selectively block some websites while keeping CDN for other websites untouched. Russia's situation is far from China, AFAIK.