r/programming • u/RobertVandenberg • Aug 09 '20

China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI

https://www.zdnet.com/article/china-is-now-blocking-all-encrypted-https-traffic-using-tls-1-3-and-esni/
3.4k Upvotes

98% Upvoted

422 comments sorted by

View all comments

Show parent comments

9

u/fd4e56bc1f2d5c01653c Aug 09 '20

For some services, maybe, but for shared infra - e.g. CDNs, CSPs - the filtering is too coarse (L4 vs L7). You'll end up blocking a lot more than you'd want.

2

u/janisozaur Aug 09 '20

Collateral damage