4 ms·
> another solution would be for YouTube to require SSL for all connections coming from Turkish IPs. What? NO! They are messing with the DNS results from 8.8.4.
by lawl 13y ago
> another solution would be for YouTube to require SSL for all connections coming from Turkish IPs.
What? NO! They are messing with the DNS results from 8.8.4.4 (Google DNS)
Too early for TLS to do anything. Maybe with HSTS, but I still doubt that HSTS is any effective against state level MITM.
- alex1 13y agoYou're right. Maybe if they turned on and required SSL for everyone visiting www.youtube.com and added www.youtube.com to Chrome's preloaded HSTS list and somehow got everyone to use Chrome. Sadly, this probably won't happen, but DNSSEC adoption probably won't happen either. Even with DNSSEC, they could still do deep packet inspection on HTTP traffic going to YouTube IPs and initiate MITM attacks that way.
- psykovsky 13y agoWhy not ditch the current DNS system and use Namecoin? If you have to force some piece of software into users computers, let's do it right at least...
- deleted 13y ago[deleted]
- GICodeWarrior 13y agoAre you suggesting the government compromised a trusted SSL CA? Or are you just saying they blocked HTTPS?
- codesuela 13y agoHuh? The government of Turkey itself is a trusted CA http://www.mozilla.org/en-US/about/governance/policies/security-group/certs/included/ http://www.mozilla.org/en-US/about/governance/policies/secur... Ctrl+F "Government of Turkey"