2 ms·

Everything other than 80 and 443 is blocked by default, anything-over-https is just a matter of time. With a properly configured TLS MITM proxy only certificate

by baq 2y ago

Everything other than 80 and 443 is blocked by default, anything-over-https is just a matter of time. With a properly configured TLS MITM proxy only certificate pinning will prevent snooping, but it’ll also prevent connectivity, so you might call it a win for security/privacy, or a loss for the open internet if it’s you who needs to VPN to a safe network from within such an environment…

wkat4242 2y ago
A port number does not force a certain protocol. You can run everything you want over port 443. And yeah I also think it's a really bad idea to run everything over https. But I don't think it'll happen.
- baq 2y ago
  You can. The client side enterprise proxy/firewall really doesn’t want you to, though. Just a fact of life.
  - wkat4242 2y ago
    Yeah I wasn't really thinking of enterprise in this whole discussion though. After all, it's about pi-hole.