3 ms·
For folks that are living under Internet censorship regimes, would you be able to bypass these blocks by changing DNS servers? The idea being that you can have
by rfd4sgmk8u 5y ago
For folks that are living under Internet censorship regimes, would you be able to bypass these blocks by changing DNS servers?
The idea being that you can have a local :53 resolver on your network, and resolves these names over an encrypted channel to cloudflare or other DoH (DNS Over HTTPS) encrypted DNS provider.
This will prevent the internet provider from messing with your unencrypted DNS traffic.
Some options here:
https://developers.cloudflare.com/1.1.1.1/encrypted-dns/dns-over-https/dns-over-https-client https://developers.cloudflare.com/1.1.1.1/encrypted-dns/dns-...
- jleahy 5y agoNo, the blocks are at the IP level.
- capableweb 5y ago> For folks that are living under Internet censorship regimes Well, TPB is blocked in plenty of western countries that wouldn't normally be counted as "internet censorship regimes". Would be much more accurate to say "Living under the extended umbrella of MPAA and US influence". The block exists in many European countries for example.
- rfd4sgmk8u 5y agoNo, don't downplay it. Internet censorship is internet censorship. It is unacceptable. You are being told what you are not allowed to see. The pirate bay has absolutely no material that infringes any copyright holder -- it hosts magnet links and comments. Infohash's identify content in a torrent and permit resolution of the files via trackers and DHT. If someone chooses to use these magnet links to resolve and download bytes of copyright material, that's on them. TPB is an archive of hashes. 'Western countries' that prevent their citizens from viewing hashes is pre-crime enforcement. Do not accept this.
- betterunix2 5y agoWhat exactly is the difference? Censorship for the purpose of protecting business interests is still censorship by any reasonable and honest definition. Even moreso considering the history of copyright law and its relationship with censorship regimes...
- StrLght 5y agoJFYI: Even if you use 3rd party DNS so that ISP doesn't spoof DNS records for some domains, domains are still present in plaintext in TLS encrypted traffic due to Server Name Identification (SNI). It seems that most of internet censorship regimes know about it.
- rfd4sgmk8u 5y agoESNI is our best hope. Every channel must be indistinguishable from random noise. https://www.cloudflare.com/learning/ssl/what-is-encrypted-sni/ https://www.cloudflare.com/learning/ssl/what-is-encrypted-sn...
- StrLght 5y agoESNI is no longer relevant since it's vulnerable to a few attacks. It's ECH now. But it seems too late: some countries have already prohibited it via laws and regulations [1]. It may help other countries making censorship/intelligence harder though. [1] https://linuxreviews.org/New_Russian_Legislation_Would_Outlaw_Tor_And_Sites_Using_Encrypted_ClientHello https://linuxreviews.org/New_Russian_Legislation_Would_Outla...