Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Airtel is sniffing and censoring CloudFlare’s traffic in India

medium.com

Post reply on HN
Print view View original

1–10 of 68 posts

Re: Airtel is sniffing and censoring CloudFlare’s traffic in India

#3

Post by ishansharma »

I know I'm being a bit cynical here but do we know that Cloudflare doesn't know about it?

It's entirely possible that they know about it. Considering their recent datacenter opening in India (again, not clear on laws but maybe they need to follow the blocking as ordered by DoT/courts?)

They just started operations in China and partnered with an ISP there, so unless they say that they are not involved, I'm sceptical about this.

Re: Airtel is sniffing and censoring CloudFlare’s traffic in India

#6

Post by fahrradflucht »

vinothgopi wrote: post #5
fahrradflucht wrote: post #4

Seems like it's not just airtel: https://medium.com/@sushubh/when-you-said-they-do-not-even-k...

Yes, the OP mentions in his post itself that all ISP customers get the same message from Airtel.

Ah so the traffic between piratebay and CloudFlare gets routed through Airtel. Thanks for pointing that out.

Re: Airtel is sniffing and censoring CloudFlare’s traffic in India

#7

Post by yoo1I »

All I'm hearing is that Cloudflare allows their customers to configure client facing TLS without enforcing it upstream over the internet, providing a false sense of security. Thanks Cloudflare!

... and I'm pretty sure that their response will be "We are just a proxy, we are not responsible for anything".

Re: Airtel is sniffing and censoring CloudFlare’s traffic in India

#8

Post by hitr »

In the article,testing the host header with different IP is done over http and not https.so i so it does not prove that Airtel is sniffing https traffic,isn't it ?

>curl -H "Host: thepiratebay.org" http://192.30.253.112/

May be I missed something. Technically it is possible block the traffic by looking at SNI[1] or simply block the ipaddress if it belongs to the blocked site.I always thought that every ISPs had to follow this because all ISPS are asked to block a list of such sites by the Supreme Court .

[]1 https://en.wikipedia.org/wiki/Server_Name_Indication

Re: Airtel is sniffing and censoring CloudFlare’s traffic in India

#9

Post by iamjason89 »

yoo1I wrote: post #7

All I'm hearing is that Cloudflare allows their customers to configure client facing TLS without enforcing it upstream over the internet, providing a false sense of security. Thanks Cloudflare! ... and I'm pretty sure that their response will be "We are just a proxy, we are not responsible for anything".

Yeah, it's intrinsic of how the flexible ssl option works: https://support.cloudflare.com/hc/en-us/articles/200170416-W...
Post reply on HN