2 ms·

A catch-all solution, that I've been using for many years, is to have a MITM proxy on the network do transparent TLS upgrading for everything that passes throug

A catch-all solution, that I've been using for many years, is to have a MITM proxy on the network do transparent TLS upgrading for everything that passes through it. Then you'll inevitably run into other more nefarious forms of user-agent-discrimination via TLS fingerprinting[1], in which case https://news.ycombinator.com/item?id=43571099 https://news.ycombinator.com/item?id=43571099 will also be useful. [1] Seeing a TLS 1.3 connection from a system identifying itself as Mac OS 7 will definitely trip a lot of "bot detection" software.

trinix912 2y ago
Yes, a proxy is the most obvious solution, but quite a bit impractical as you need to keep some other computer/rPi running. It ruins the feeling of being able to use _just_ the retro system to connect to the Internet. Regarding the user-agent, we could just spoof that.
- Tommy430 2y ago
  In all fairness, we use proxies without realizing it.
- skyyler 2y ago
  >It ruins the feeling of being able to use _just_ the retro system to connect to the Internet Surely there's a modern modem in the way somewhere?
  - deleted 2y ago
    [deleted]
Tommy430 2y ago
Speaking of MITM proxy, which one do you use? Currently doing some interesting experiments on a bunch of Legacy Windows VMs. ;-)