439
Copyright Industry Wants To Apply Automated Blocking To The Internet’s Core Routers
(www.techdirt.com)
this post was submitted on 28 Dec 2024
439 points (99.1% liked)
Technology
60560 readers
4203 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
"Hey there customer, if you want internet access on our network (the only one available in your area), you have to install our intermediary certificate on your machine!"
Also $3/mon certificate fee. To bring you the best possible service.
Hello, VPN
"Oh sorry, looks like we couldn't decrypt that traffic, those packets went to the burn pile"
How do they know what qualifies as "encrypted" vs a binary blob that could be a photo or something?
File headers, magic bits, all sorts of stuff. Plus you can (and they do) try to load common file types, so if a PNG isn't loading correctly, it fails the test.
From having worked in an enterprise environment, there's a chunk of websites that break when you intercept their SSL connection.
Hopefully all of them, since that's how network security works
Not really, because the client system is configured to go through the proxy. That proxy will connect to the website and do filtering on the unencrypted content because it is initiating the connection. Next it'll re-encrypt everything with its own certificate and serve it to the client.
Oh you're talking about enterprise scale mitm attacks on your own coworkers not the general case.
Yes, but that's what you would need to do and get if everyone had to install an intermediate cert.
Oh yea definitely, I know this pain very well