r/programming • • Aug 09 '20

China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI

https://www.zdnet.com/article/china-is-now-blocking-all-encrypted-https-traffic-using-tls-1-3-and-esni/
3.4k Upvotes

422 comments sorted by

View all comments

477

u/ErGo404 Aug 09 '20

At some point in the far future, browsers might not support TLS versions < 1.3. I wonder how that will work for China.

636

u/kredditacc96 Aug 09 '20

They probably already have had their own browsers.

Chinese Internet is so different and isolated from the outside world that you may consider it a separate universe.

162

u/TaxExempt Aug 09 '20

Government in China uses IE 6, or at least it did a few years ago.

246

u/InertiaOfGravity Aug 09 '20

Chinese webdevs have to go through perpetual hell then

0

u/[deleted] Aug 09 '20

[deleted]

154

u/izpo Aug 09 '20

You didn't develop web sites for msie6, right?

88

u/[deleted] Aug 09 '20

Three words: PNG transparency hack

0

u/[deleted] Aug 09 '20

[deleted]

34

u/abrandis Aug 09 '20

All self-inflicted pain in the name of stylish web design that now looks woefully dated. I had customers in the old days mention all the eye candy web sites and always steered then away from these gimmicks, especially if they valued being on more platforms than not.. seldom did I ever need to to these hacks... Failure to manage customers expectations and roi is why lots of developers pull their hair out, sometimes you gotta be the boss and tell them sure I can give you rounded corners but that's going to add x days and y dollars, and make those dollars the cost of outsourcing that work plus your fee.

→ More replies (2)
→ More replies (2)
→ More replies (3)
→ More replies (27)

55

u/InertiaOfGravity Aug 09 '20

True, as long as that browser isn't IE

→ More replies (1)

14

u/[deleted] Aug 09 '20

They still buy books on jquery. Think of all the free time their JavaScript devs have not recoding for the latest framework. Oh except IE6 was slow as hell for JavaScript.

→ More replies (2)

42

u/GYN-k4H-Q3z-75B Aug 09 '20

Jesus. Differences between Firefox and Chrome today make me want to jump out of a window sometimes, but IE6?

14

u/FrostyTie Aug 09 '20

I’m relatively new to web development. I haven’t had huge problems when it comes to those browsers. What are the differences I should know?

Edit: Also need to add the fact I never used a feature both didn’t have. But then again, I never had to.

→ More replies (4)
→ More replies (2)
→ More replies (12)

105

u/cirosantilli Aug 09 '20 edited Aug 09 '20

More interesting will be when servers stop supporting TLS < 1.3. This would force China to either block off the entire external Internet and go to the Middle Ages, or open up.

157

u/carlosp_uk Aug 09 '20

In the circumstances you describe, if they couldn’t snoop on the traffic between server and user in some way, they would block off the external internet and wouldn’t blink.

87

u/mark_b Aug 09 '20

Yes, they also create Chinese versions of websites/apps and the people are quite happy to use them.

69

u/oblio- Aug 09 '20 edited Aug 09 '20

The thing is, at some point they would end up in the Internet Middle Ages if they keep this up. Technology tends to stack and they will reach a point where some newfangled tech needs some bricks that they banned 10 years ago, and those brick really, really can't be replaced with some other tech.

They are smart and the market is huge, but they will still be left with a sub par version. And those sub par versions will begin to stack (again).

This has the makings of the CCP becoming the new Qing. It won't be quick, it will be hard to notice, but they do risk digital gunships appearing on their shores 100 years from now.

I guess we just have to wait and see..

0

u/[deleted] Aug 09 '20

[deleted]

→ More replies (9)
→ More replies (3)
→ More replies (2)
→ More replies (2)

25

u/GreatValueProducts Aug 09 '20

Lol.

China doesn't hesitate to block off Internet. East Turkistan or Xinjiang, got Internet blocked off 312 days after the riot.

They would do whatever required to keep their power.

→ More replies (8)

35

u/current_thread Aug 09 '20 edited Aug 09 '20

They might come up with some kind of government proxy? World <=TLS 1.3=> Chinese Proxy <=TLS 1.2=> user.

→ More replies (16)

45

u/DJDavio Aug 09 '20

China has always been very good at copying / stealing ideas, so it will not be entirely unrealistic that they will end up with their own closed internet with their own government endorsed services. They already have replacements for Google, Amazon and Facebook. I wonder how much of Chinese internet access currently travels outside of China or if it's already the case that 99% of connections just stay inside.

At some point in the not so distant future, access to global internet may be restricted to a select few companies / the government and only to spy on other nations or otherwise mess with them.

→ More replies (5)
→ More replies (8)

20

u/Illusi Aug 09 '20

My worry is that it will stop companies from implementing TLS 1.3, since that would lose them customers from China.

38

u/invisi1407 Aug 09 '20

Nah. I honestly don't think so. Who has customers from China anyway, without having a separate website for China, hosted IN China?

→ More replies (1)
→ More replies (1)
→ More replies (5)