651 class

SichangHe · Dec 2, 2024 · 6493d4d · 6493d4d
1 parent 9145ac4
commit 6493d4d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/linked/JSphere b/linked/JSphere
diff --git a/src/notes/class_notes/csci651.md b/src/notes/class_notes/csci651.md
@@ -660,5 +660,9 @@ multiprotocol label switching (MPLS): show up on BGP
 - measure: visit sensitive website from VP within Kazakhstan
     - probe from outside: visit forbidden website at HTTPS server in
         Kazakhstan; work bc Kazakhstan not care direction
+- interception trigger: targeted domain in TLS Server Name Indication (SNI)
+    header
+- countermeasure: TLS 1.3 encrypt SNI, server or
+    browser reject government certificate
 
 ## *Tor: The Second-Generation Onion Router*, Roger Dingledine, Nick Mathewson, Paul Syverson