DPI

[subSTRATA]

"."

[DeathAndTaxes]

Govts control ... that is what they do ... that is all they do.

Then again you can't deep packet inspect an encrypted packet.

Deep Packest Inspector "Hmm I deeply know this packet is still encrypted".

[DeathAndTaxes]

No I am sure on that.

[mcgravier]

If this goes on, internet gonna be renamed as in-TOR-net.

[spiccioli]

No I am sure on that.

Death&Taxes,

next step will be stopping every packet that cannot be deeply inspected ...

spiccioli

[casascius]

No I am sure on that.

Death&Taxes,

next step will be stopping every packet that cannot be deeply inspected ...

spiccioli

Next will come steganographic streaming algorithms that look like mpeg but carry unidentifiable encrypted data.

[spiccioli]

No I am sure on that.

Death&Taxes,

next step will be stopping every packet that cannot be deeply inspected ...

spiccioli

Next will come steganographic streaming algorithms that look like mpeg but carry unidentifiable encrypted data.

casascius,

I'm not sure this would be feasible, how much data do you need to hide current blockchain inside it?

spiccioli

[BladeMcCool]

No I am sure on that.

Death&Taxes,

next step will be stopping every packet that cannot be deeply inspected ...

spiccioli

Next will come steganographic streaming algorithms that look like mpeg but carry unidentifiable encrypted data.

casascius,

I'm not sure this would be feasible, how much data do you need to hide current blockchain inside it?

spiccioli

of course it's feasible. the point is that governments cannot stop the free flow of information no matter how hard they try. we will always find ways to route around the damage they try to cause.

[Rudd-O]

Then again you can't deep packet inspect an encrypted packet.

Of course you can.  DPI hardware has the capability to decrypt using phony certificates and then reencrypt.  You wouldn't even notice it happening, unless you have a browser extension that flagged those phony certs.  They have been doing this for YEARS already.

[Insu Dra]

Then again you can't deep packet inspect an encrypted packet.

Of course you can.  DPI hardware has the capability to decrypt using phony certificates and then reencrypt.  You wouldn't even notice it happening, unless you have a browser extension that flagged those phony certs.  They have been doing this for YEARS already.

+1

SSL has become a joke and this will just hollow it out even further. Playing man in the middle was already easy for isp's, cloadflare was a nice beta test to scale this up and to get around specific tools that warned about possible false certificates.

More Info: http://perspectives-project.org/

Personally I removed all ca's from my browser and only trust certificates I add manually.

[Deafboy]

Personally I removed all ca's from my browser and only trust certificates I add manually.

I am using certpatrol in FF instead, but with google's services it's useless. They has so many different certificates...

[pyramining]

IPv6 should support IPSec natively, I am not an expert of crypto stuff, but to me it seems strong enough to prevent DPI. We should just use it.

[CIYAM]

In the soon to be released CIYAM open source project all sensitive content is encrypted over plain HTTP that is injected dynamically (think AJAX).

With the page calling for the injection being able to be formatted any way you like it should be very hard to determine what is going on unless they also plan to ban all dynamic HTML injection.

[Insu Dra]

Personally I removed all ca's from my browser and only trust certificates I add manually.

I am using certpatrol in FF instead, but with google's services it's useless. They has so many different certificates...

Yha, there are some services that will simply not work when removing ca's or at least not within reason, they have to meany or dynamic certs (google being one of them idd). I just have a unsafe os setup to use those and keep things separated.

IPv6 should support IPSec natively, I am not an expert of crypto stuff, but to me it seems strong enough to prevent DPI. We should just use it.

It has the same issue, what certificate to trust ? Only if you manually add a certificate that you personally trust is it secure, any exciting type of dynamic/automated distribution creates holes.