Hacker News Reader

With ssl the best they can do is this host level blocking unless they perform mitm attacks.

> unless they perform mitm attacks

Which any state-sponsored actor can easily do, of course.

Please tell me how Turkey is going to MITM Google on a recurring basis, enough to implement filtering.

By using a CA they control to generate a fake certificate for Google like they've already "accidentally" done:

Which they can only pull off once before their CA is distrusted. See: how Chinese government CA was restricted to .cn domains only