Hacker News new | ask | show | jobs
by MichaelMoser123 3358 days ago
for a great firewall you have two choices

1) block SSL/TSL traffic and VPNs at the border

2) Man in the middle attack (this would needs browsers to accept certificates with a matching wildcard domain )

(1) would block internet commerce at the border - this is not acceptable in western countries were free trade is above everything else. (2) is a problem because the wildcard certificates will leak out and criminals will use them, this will eliminate trust and kill internet commerce internally (also it is quite resource intensive)

In any event a great firewall is a great tragedy: for Russia that would mean the end of any remaining freedom of speech and an end to the independent opposition - for example Navalny will no longer be able to mobilize anyone. Its a fact how freedom of communication directly translates into political liberties; block one of them and you loose the other... (it is also a Pyrrhic victory for the Russian state because limiting information results leads to ptechnological backwardness)

So for the meantime that means that a great firewall in a western country is very unlikely. Of course internet pundits said that of Russia at the turn of this century.... so the fact remains that it is impossible to predict anything.

TIL: the great firewall of china is called golden shield ( https://en.wikipedia.org/wiki/Golden_Shield_Project ) in Russia they might as well call it "stalin's pipe"