3 ms·

Please watch my FOSDEM talk from 2020, it explains the similar effect in Russia: https://archive.fosdem.org/2020/schedule/event/sdnpof/ https://archive.fosdem.o

Please watch my FOSDEM talk from 2020, it explains the similar effect in Russia: https://archive.fosdem.org/2020/schedule/event/sdnpof/ https://archive.fosdem.org/2020/schedule/event/sdnpof/ The most likely explanation is: the government does not want to block your website, it is collateral damage. They want to block something else, but there is no technical possibility to block that without also blocking your website. This also explains variation between ISPs: there is no centralized solution for blocking. Some of them are using IP-based blocking because they have no technology that would look deeper, some of them block on the DNS level, and some on the TLS SNI level.

anyfactor 4y ago
The video wasn't loading for me there, here is the YouTube link: https://www.youtube.com/watch?v=x6SwxXhZGv4 https://www.youtube.com/watch?v=x6SwxXhZGv4
- patrakov 4y ago
  It wasn't loaded because the CDN that hosts it redirects from HTTPS to plain HTTP.
pseudostem 4y ago
I hold a Class B ISP license. We get letters (not emails, physical letters)from Department of Telecommunication asking us to block http://www.example.com http://www.example.com We don't bother with blocking http://example.com http://example.com or its https cousin. In this case we have not received any letter for VLC
- OmarAssadi 4y ago
  Do they not also ever request blocks on particular IP addresses? A lot of collateral damage happened due to blocking whole ranges from AWS and such when Russia was trying to ban Telegram.
  - pseudostem 4y ago
    We haven't received request for blocking blocks of IPs till date. Maybe it happens with upstream ISPs or peering exchanges, I'm unsure. In the past, we have received requests for single IP addresses
arise 4y ago
Thank you... It's a good reminder that censorship always has collateral damage.
vermote 4y ago
I was at FOSDEM that year but unfortunately missed your talk. Just watched the video of it and it was very well explained, taught me a thing or two about CDN's and SPOF's, thanks for that.

anyfactor 4y ago

The video wasn't loading for me there, here is the YouTube link: https://www.youtube.com/watch?v=x6SwxXhZGv4 https://www.youtube.com/watch?v=x6SwxXhZGv4

patrakov 4y ago
It wasn't loaded because the CDN that hosts it redirects from HTTPS to plain HTTP.

pseudostem 4y ago

I hold a Class B ISP license. We get letters (not emails, physical letters)from Department of Telecommunication asking us to block http://www.example.com http://www.example.com We don't bother with blocking http://example.com http://example.com or its https cousin. In this case we have not received any letter for VLC

OmarAssadi 4y ago
Do they not also ever request blocks on particular IP addresses? A lot of collateral damage happened due to blocking whole ranges from AWS and such when Russia was trying to ban Telegram.
- pseudostem 4y ago
  We haven't received request for blocking blocks of IPs till date. Maybe it happens with upstream ISPs or peering exchanges, I'm unsure. In the past, we have received requests for single IP addresses

arise 4y ago

Thank you... It's a good reminder that censorship always has collateral damage.

vermote 4y ago

I was at FOSDEM that year but unfortunately missed your talk. Just watched the video of it and it was very well explained, taught me a thing or two about CDN's and SPOF's, thanks for that.