Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You can bypass SNI inspection [0] with tools like GreenTunnel [1] and Intra [2].

[0] https://twitter.com/vinifortuna/status/1304189371688660992

[1] https://news.ycombinator.com/item?id=22654737

[2] https://getintra.org/



Thanks for the link, just tried Green Tunnel on the use case where my ISP is blocking me and just managed to change the error from PT_CONNECT_RESET_ERROR to PR_END_OF_FILE_ERROR.

Side note, looks like that if installed by snap on Ubuntu 20.10 it cannot automagically change the proxy configuration in Gnome

  green-tunnel:system-proxy [SYSTEM PROXY] error on SetProxy   (Error: Command failed: gsettings set org.gnome.system.proxy mode manual
  green-tunnel:system-proxy /bin/sh: 1: gsettings: not found
Enabling proxy manually makes it work but yet, it doesn't circumvent my ISP filtering :(


Does Intra work?


I can't find any source on intra working to prevent SNI sniffing. The page itself only mentions DNS, and Googling doesn't reveal any other source for that.

E: NVM, found it. It does like it uses split hellos.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: