• crab@lemm.ee
    link
    fedilink
    arrow-up
    7
    arrow-down
    1
    ·
    1 year ago

    Some VPNs use ports 443 or 80 which won’t be blocked. There’s also some which disguise the traffic to appear as HTTPS. It’s a cat and mouse game but I don’t see the cat winning.

    • deadcream@kbin.social
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      Russia already has national root TLS certificate that’s must installed on all devices (basically government-mandated MITM). The next step is to start severely throttling (and optionally blocking) TLS connections that don’t use it. Some popular foreign sites like Google can remain functional by replacing their certificate at ISP level (all ISPs are already controlled by the government).

      • chayleaf@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        bruh what are you talking about, there are indeed national root certs but that’s purely for Sberbank and similar government sites, I wouldn’t put it past them to go further but we’re a loooooong way off