[tor-bugs] #6045 [Tor Bridge]: Ethiopia blocks Tor based on ServerHello

[Tor Bug Tracker & Wiki]

#6045: Ethiopia blocks Tor based on ServerHello
------------------------+---------------------------------------------------
 Reporter:  asn         |          Owner:     
     Type:  task        |         Status:  new
 Priority:  normal      |      Milestone:     
Component:  Tor Bridge  |        Version:     
 Keywords:  dpi         |         Parent:     
   Points:              |   Actualpoints:     
------------------------+---------------------------------------------------

Comment(by runa):

 Replying to [comment:3 cypherpunks]:
 > For test purpose you need to use standard modern Firefox and connect to
 normal validated https site that negotiate exactly the same cipher suite
 as described (TLS1_TXT_DHE_RSA_WITH_AES_256_SHA)?

 Sounds like a good idea. The challenge would be finding a website that is
 (1) HTTPS, (2) blocked in Ethiopia, (3) negotiates
 TLS1_TXT_DHE_RSA_WITH_AES_256_SHA.

 > Did you ran such test? Did you know such example site? What reported
 result?

 I ran a test where I asked the user to visit a blocked website, without
 Tor, and capture the traffic with Wireshark. I don't know if the site
 he/she visited negotiated the same cipher suite, though. The result was
 that the user got a message saying the connection had been reset. This is
 the same message you get if you visit baidu.com and search for a term you
 know is blocked in China.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6045#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online