91–100 of 138 posts
Earlier quoted context omitted.
Private ones usually do. (outgoing)
Corporate ones sure don't. Even outgoing HTTP is passed through proxies on most bigco networks I've worked at.
Earlier quoted context omitted.
Private ones usually do. (outgoing)
Corporate ones sure don't. Even outgoing HTTP is passed through proxies on most bigco networks I've worked at.
Home routers is another matter, home users don't make conscious decision about it, but in my experience UDP works just fine (because a lot of games use it) and it should be good enough for any protocol.
Earlier quoted context omitted.
What if I want to use my router to block telemetry domains? Or other malware sites? It’s looking like the only way forward is running my own CA to mitm all encrypted traffic.
That seems superior anyway - you could keep blocking domains even when you're on the go.
Earlier quoted context omitted.
That graph has a couple doglegs that make it look exponential. The last dogleg was January 2015. And since then it’s been linear (with a little stall this month) at about 5% of the Internet converting per year. That’s another 15 years to convert the rest, unless there’s a new dog leg up. Also percentages don’t work the way humans think they do. Especially when the number of devices is constantly climbing. That may ju…
Agreed. I say IPv6 is inevitable, but it's not like the IPv4 addresses will expire. The economics going forward will be interesting. I've seen some low-end VPSes charge a lower rate for machines that are IPv6-only.
Earlier quoted context omitted.
You can tunnel SCTP on top of UDP. Port 9899. https://www.ietf.org/proceedings/48/I-D/sigtran-sctptunnel-0...
This is an improvement --- it was dumb of SCTP to try to claim a top-level IP protocol for this --- but only marginally, since lots of firewalls won't pass traffic on random UDP ports either.
This is just depressing. Sure, sell us out to big corporations by not implementing proper features in protocols like HTTP/2 so we can get tracked for decades to come. Yet, represent freedom by yet another cool way to "fool" governments. When historians look back at what happened to the Internet, or even society, they are going to find that organizations like the IETF was to busy with romantic dreams of their own grea…
What features are missing that should be implemented?
Earlier quoted context omitted.
What features are missing that should be implemented?
Not the OP, but omitting support for SRV records in HTTP/2 was a terrible missed opportunity, as I’ve written about here before: https://news.ycombinator.com/item?id=8404788 https://news.ycombinator.com/item?id=8550133 I quote myself: “ It really is no surprise that Google is not interested in this, since Google does not suffer from any of those problems which using SRV records for HTTP would solve. It’s only users w…
Earlier quoted context omitted.
You, as a user, absolutely can. An ISP or network administrator who does not control the endpoints, on the other hand, cannot, by design. That's a feature.
What if I want to use my router to block telemetry domains? Or other malware sites? It’s looking like the only way forward is running my own CA to mitm all encrypted traffic.
Earlier quoted context omitted.
That seems superior anyway - you could keep blocking domains even when you're on the go.
Can I? On Android, apps now can decide if they want to accept user-installed CAs, or not. So if an app is hostile (say, all the Google apps), then I have no way to intercept their traffic anymore.