postshwa.blogg.se

Tor = The Tor Project, a collaborative project that provide an internet censorship circumvention software and implementation One of its weaknesses is abused by ISPs by sending a forged or malformed TCP reset packet, known as TCP reset attack TCP = Transmission Control Protocol, one of the main protocols of the internet protocol suite.

Several ways exist to encrypt or hide SNI to evade censorship, notably Encrypted Client Hello (ECH)

By default, SNI is unencrypted and this is abused by ISPs by the way of filtering SNI. SNI = Server Name Indication, an extension to DNS to serve multiple HTTPS sites at the same IP address with different public key certificates. Many ISPs are abusing DNS by blocking, hijacking, or redirecting alternative resolversĭPI = Deep Packet Inspection, a method used by firewall or middlebox to throughly inspect every packet that passing a network, packet can be blocked or dropped by certain rules Some fixed ISPs are already implementing DNS hijacking, DNS redirection, SNI filtering, and DPI and if that happened with your connection, you can use a DPI bypass software (dpitunnel, GoodbyeDPI, GreenTunnel, PowerTunnel), VPN, or TorĭNS = Domain Name System, a naming system that used to identify computers, devices, and servers across computer network, including internet. Modified host file (like bebasid) also still work. Solution is to use a DPI bypass software (dpitunnel, GoodbyeDPI, GreenTunnel, PowerTunnel), Virtual Private Network (VPN), or TorĬertain mobile operators aren't implementing the new blocking mechanism yet, meaning that encrypted DNS systems like DNS over TLS may still usableįixed ISPs (fibre or hybrid fibre coaxial): Encrypted DNS systems like DNS over HTTPS, DNS over TLS, DNS over QUIC, and DNSCrypt still work with most fixed ISPs. Mobile operators: Most operators are already blocking alternative Domain Name System (DNS) resolvers, with DNS hijacking, DNS redirection, Transmission Control Protocol (TCP) reset attack, Server Name Indication (SNI) filtering, and Deep Packet Inspection (DPI). Summary of accessibility of Reddit with Indonesian mobile operators and fixed ISPs (as of 12 April 2022):

This pinned comment is under construction, you can suggest useful addition by replying to this comment