undefined | Better HN

0 pointshueving9y ago0 comments

With ssl the best they can do is this host level blocking unless they perform mitm attacks.

0 comments

> unless they perform mitm attacks

Which any state-sponsored actor can easily do, of course.

Please tell me how Turkey is going to MITM Google on a recurring basis, enough to implement filtering.

By using a CA they control to generate a fake certificate for Google like they've already "accidentally" done:

j / k navigate · click thread line to collapse

> unless they perform mitm attacks

Which any state-sponsored actor can easily do, of course.

Please tell me how Turkey is going to MITM Google on a recurring basis, enough to implement filtering.

By using a CA they control to generate a fake certificate for Google like they've already "accidentally" done:

j / k navigate · click thread line to collapse