@signalapp Keep in mind that many highly censored countries...

@signalapp Keep in mind that many highly censored countries you talk about just will ban ECH at all. So I don't think that your solution is viable.

Like 9 August at 19:07 | Wall-to-wall | Open on mastodon.social

8 comments

Dino

@network_is_reliable @signalapp Can an operator ban ECH?

9 August at 19:29 | Open on infosec.exchange

Network is reliable

@dinosm @signalapp It's already done in Russia using DPI for example.

9 August at 19:32 | Open on mastodon.social

Rich Felker

@dinosm @network_is_reliable @signalapp Yes, but that's not practical if all mainstream sites use ECH. Adoption is critical to everybody's safety.

9 August at 20:00 | Open on hachyderm.io

Irenes (many)

@dalias @dinosm @network_is_reliable @signalapp yeah it's the herd immunity effect for privacy

9 August at 20:24 | Open on adhd.irenes.space

Network is reliable

@dalias @dinosm @signalapp As long as mainstream sites have to be back-compatible with previous TLS versions usage of ECH won't be practical at all as tool against censorship. And keep in mind that there are countries which already banned Google and Youtube. ECH will be just banned too.

9 August at 20:25 | Open on mastodon.social

DELETED

@network_is_reliable @signalapp The only way to "ban ECH" would be to ban the internet entirely. If ECH is part of the TLS handshake then you can't ban it any more than you can ban HTTPS. You would have to disallow any browser that uses it as standard, firewall off any traffic that uses it, and basically stop existing on the internet.

And you'd still get fucked by a VPN.

9 August at 19:53 | Open on mstdn.games

Network is reliable

@krangled @signalapp ECH is just a TLS extension, and it is blocked in Russia, as I said. You can establish a connection without it, but ECH and eSNI (previous attempt) are banned. And yes, Russia is country which started to block Signal messenger today, and a few weeks ago started to slowdown and block Youtube. So yes, they can break the Internet as they want, despite the collateral damage.

So relying on ECH is not an option for countries like Iran, Turkmenistan, China, Russia.

9 August at 20:09 | Open on mastodon.social

DELETED

@network_is_reliable @signalapp Reductionist tripe. By this non-logic we should just not give a shit about anything because at some level every government can just turn off the internet if they choose.

Further, shitting on a technology because an abusive regime doesn't like it is as close to dictator-slurping as you can get without becoming a ballchinian.

"Don't even try to improve, because Daddy Poots might have a big sad."

9 August at 20:34 | Open on mstdn.games