3 ms·

> OP claims it's SNI based and not DNS based, so switching DNS providers likely won’t do anything. All the apps listed do get past most rudimentary SNI-based b

> OP claims it's SNI based and not DNS based, so switching DNS providers likely won’t do anything. All the apps listed do get past most rudimentary SNI-based blocks, incl GoodbyeDPI which is pretty sophisticated. One still needs DoH because (unencrypted) DNS is the weakest link.

fragmede 4y ago
Then that's not SNI-based blocking.
- fomine3 4y ago
  Simple SNI-based blocking implementation may not consider complex data like fragmented packet, so some solutions work.