Hacker News Reader

Can we, endpoints outside Kazakhstan, detect when a MITM client is connected and serve a boiler plate message "Untrusted connection"?

If enough high level sites do this (Google, Cloudflare, Wikipedia etc) it might force the hand of the government since they are the ones effectively breaking the internet.

View on HN

Yes, https://blog.cloudflare.com/monsters-in-the-middleboxes/

No, mitm is not easily detected on server side. It's a transparent proxy. You could start serving these messages to whole KZ ip range, though.

If someone could enlighten me where i'm wrong, it'd be much more constructive than simply downvoting.

https://blog.cloudflare.com/monsters-in-the-middleboxes/

https://mitm.watch

Thank you. An interesting technique, but ultimately very easily bypassed with minor effort on interceptors' behalf.

Reply on news.ycombinator.com