3 ms·
Make sure that you don’t use the default DNS servers of your ISP, but those of Google, OpenDNS or Cloudflare. Most of these redirects are done at the DNS level.
by Centrino 4y ago
Make sure that you don’t use the default DNS servers of your ISP, but those of Google, OpenDNS or Cloudflare. Most of these redirects are done at the DNS level. This could also explain the certificate error, if the cerificate is for another domain than rt.com.
- orangepurple 4y agoThat makes sense. How are the redirects working so that the final certificate presented to me is from advice.upc.biz? I'm very confused!
- Centrino 4y agoIf the DNS server of your local ISP maps rt.com into an IP address that it controls but for which the server has a certificate for a different domain, i.e. upc.biz, there is a conflict: your browser still has rt.com in the address bar (it is not a http redirect) but it sees a certificate for upc.biz, so it reports a certificate error.
- Centrino 4y agoYou didn't tell if, when trying to visit rt.com, you arrive at a page with a message about the blocking, or simply a blank page, or you see the rt.com site. In the latter case, it would indeed be a MITM attack by way of DNS hijacking and a proxy. In the former cases, it's not MITM because you never see the content you wanted to see.
- orangepurple 4y agoI see the chrome invalid cert page (inline in my original post) sputnik news does an HTTP redirect to an ISP page about censorship