Timeline for Can ISPs selectively block a page URL on a HTTPS website leaving its other page URLs alone?
Current License: CC BY-SA 4.0
18 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2021 at 7:24 | history | edited | CommunityBot |
replaced https://tools.ietf.org/html/draft with https://datatracker.ietf.org/doc/html/draft
|
|
| Jan 20, 2021 at 19:36 | comment | added | FrederikVds | Never mind, someone removed the edit. Sigh... | |
| Jan 20, 2021 at 11:14 | comment | added | FrederikVds | I removed the info about ESNI which is not relevant to the actual answer. Replies to comments should go in the comments. | |
| Jan 20, 2021 at 11:14 | review | Suggested edits | |||
| Jan 20, 2021 at 13:21 | |||||
| S Jan 19, 2021 at 20:17 | history | suggested | Kartik Soneji | CC BY-SA 4.0 |
Fix typo: Cloudfare -> Cloudflare
|
| Jan 19, 2021 at 19:43 | review | Suggested edits | |||
| S Jan 19, 2021 at 20:17 | |||||
| S Jan 19, 2021 at 16:16 | history | suggested | John Kugelman | CC BY-SA 4.0 |
Quote the comment being responded to for context
|
| Jan 19, 2021 at 15:10 | review | Suggested edits | |||
| S Jan 19, 2021 at 16:16 | |||||
| Jan 19, 2021 at 1:06 | comment | added | slebetman | @Desmond You Government may attempt to issue themselves with the same certificates as the website thereby allowing them to insert a transparent HTTPS proxy between you and the website and blocking specific pages but if they get caught browser manufacturers will simply ban all SSL/TLS certificates from your government forcing all websites to buy their certificates somewhere else. This has happened several times before, most recently for Khazakstan. Browser vendors do this because falsely issuing certificates is a flagrant violation of trust | |
| Jan 18, 2021 at 20:12 | comment | added | Ivan | @Desmond The CCTLD gives your government the right to seize the domain, not monitor or control access to specific HTTPS endpoints. | |
| Jan 18, 2021 at 20:12 | comment | added | user1937198 | @Desmond No, the specific TLD has nothing to do with the mechanics of HTTPS. | |
| Jan 18, 2021 at 18:18 | comment | added | Desmond | Thanks for the answer. As a followup, if the TLD used by the offending website is a country specific domain ie the CCTLD used is under the control of my Govt including the domain Registrar, would it be possible to block specific web pages using HTTPS ? | |
| Jan 18, 2021 at 13:27 | history | edited | ThoriumBR | CC BY-SA 4.0 |
Explanation about ESNI
|
| Jan 18, 2021 at 12:30 | comment | added | throx | @ThankYouSRT Possibly you have a corporate style firewall between you and the internet which is decrypting the internet traffic, selectively blocking it, and re-encrypting it with a certificate that corporate IT has installed only your machine. Check the "lock" symbol beside the URL and see who provided the certificate for the page. | |
| Jan 18, 2021 at 12:16 | comment | added | Richard Ward | At a guess, the site is either not served over HTTPS or sometihng is doing the blocking before the encryption is applied. | |
| Jan 18, 2021 at 11:52 | comment | added | ThankYouSRT | Not sure if others have faced this issue but sometimes, I cannot access a website say www.example.com because it has been blocked and see an error message instead, but at the same time I can access any subpages like www.example.com/archives. What happens in that case? Thanks | |
| Jan 18, 2021 at 11:49 | comment | added | s1lv3r | Encrypted SNI is actually a thing (I think Cloudfare did add support back in 2018). Admittedly I have no idea how widespread it is. Otherwise your answer is correct of course (+1). | |
| Jan 18, 2021 at 0:12 | history | answered | ThoriumBR | CC BY-SA 4.0 |