undefined | Better HN

0 pointscmircea12y ago0 comments

They CANNOT use HTTP filtering as that would break on HTTPS.

0 comments

Nope, the domain is always visible on HTTPS, due to SNI. They can just block it.

Older Win XP machines doesn't support SNI, so you could get around it with an older machine. Of cause that's a problem that will go away over time.

icebraining12y ago

To connect to an HTTPS site without SNI, the IP can only host a single domain, so they can just block the whole (IP:443) combination without affecting any other site.

1 more reply

rmc12y ago

I think Cleanfeed didn't block HTTPS. When have you ever heard of a public, governmental programme that didn't have a stupid flaw? :P

j / k navigate · click thread line to collapse

0 comments

icebraining12y ago

Nope, the domain is always visible on HTTPS, due to SNI. They can just block it.

mrweasel12y ago

Older Win XP machines doesn't support SNI, so you could get around it with an older machine. Of cause that's a problem that will go away over time.

icebraining12y ago

To connect to an HTTPS site without SNI, the IP can only host a single domain, so they can just block the whole (IP:443) combination without affecting any other site.

1 more reply

rmc12y ago

I think Cleanfeed didn't block HTTPS. When have you ever heard of a public, governmental programme that didn't have a stupid flaw? :P

j / k navigate · click thread line to collapse