5 ms·
Encrypted Client Hello (ECH) Effectively Defeats Pirate Site Blocking
- bertman 3y agoBig discussion about Cloudflare's original blog post from a week ago: https://news.ycombinator.com/item?id=37703885 https://news.ycombinator.com/item?id=37703885
- galadran 3y agoMozilla's launch earlier this week: https://blog.mozilla.org/en/products/firefox/encrypted-hello/ https://blog.mozilla.org/en/products/firefox/encrypted-hello...
- webmobdev 3y agoI don't get it - why can't the "right holder" who wants a site blocked drag Cloudflare itself to the court over this, just like ISP's are asked to do the blocking now?
- LinuxBender 3y agoThey could but this would force people down the legal route vs. being able to easily filter on edge devices. Meaning ISP's and corporations that cooperate with requests vs. court orders would be out of the picture and block-lists distributed by firewall vendors become less effective. This may get interesting in the corporate world where firewalls such as PAN and Fortigates are expected to block unwanted domains. Some companies also filter on internal DNS but may have to start blocking or intercepting MiTM DoH or just outright blocking the DNS "HTTPS" requests which is one documented way to disable ECH. [1] [1] - https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/apply-filters-on-dns-queries https://learn.microsoft.com/en-us/windows-server/networking/...
- LinuxBender 3y agoTicket for nginx support [1] created 2yrs ago, updated 27 hours ago Discussion for HAProxy [2] Hoping wtarreau chimes in OpenSSL [3] [1] - https://trac.nginx.org/nginx/ticket/2275 https://trac.nginx.org/nginx/ticket/2275 [2] - https://github.com/haproxy/haproxy/issues/1924 https://github.com/haproxy/haproxy/issues/1924 [3] - https://github.com/openssl/openssl/issues/7482 https://github.com/openssl/openssl/issues/7482