5 ms·
If everyone does this wouldn’t that encourage them to try to do carrier grade SSL decryption? I seem to recall that some country is already doing this and to ge
by Bluecobra 3y ago
If everyone does this wouldn’t that encourage them to try to do carrier grade SSL decryption? I seem to recall that some country is already doing this and to get online you need to trust the state’s CA.
- TheRoque 3y agoI would be interested to know which country this is
- johnbatch 3y agoHere’s an article about Kazakhstan: https://www.f5.com/labs/articles/threat-intelligence/kazakhstan-attempts-to-mitm-itscitizens https://www.f5.com/labs/articles/threat-intelligence/kazakhs...
- 8organicbits 3y agoKazakhstan? That attempt failed. I recently cataloged similar concerns[1]. [1] https://alexsci.com/blog/ca-trust/ https://alexsci.com/blog/ca-trust/
- nirui 3y agoWell, a long time back, there are proxies such as fqrouter, GoAgent and XX-NET which sends plain but loaded HTTP requests as transport. So I guess if a country decides to ban/decrypt TLS, people can just switch to another proxy/protocol. Of course, both fqrouter and GoAgent is long gone by now and should not be used. However, it seems that XX-Net is still been actively developed and (according to their project page on GitHub) is currently give out one million free ChatGPT-3.5 tokens for it's paying user...(I mean like... what??? and why???)