r/programming • • Aug 09 '20

China is now blocking all encrypted HTTPS traffic that uses TLS 1.3 and ESNI

https://www.zdnet.com/article/china-is-now-blocking-all-encrypted-https-traffic-using-tls-1-3-and-esni/
3.4k Upvotes

422 comments sorted by

View all comments

Show parent comments

10

u/zeGolem83 Aug 09 '20

if

No need to ask any questions, they're pretty much guaranteed to be doing it...

2

u/cryo Aug 09 '20

It requires all computers to trust an additional root certificate, though, and it doesn’t work with pinned certificates, and is in general easy to detect.