Hacker News Reader

OP claims it’s SNI based and not DNS based, so switching DNS providers likely won’t do anything.

> OP claims it's SNI based and not DNS based, so switching DNS providers likely won’t do anything.

All the apps listed do get past most rudimentary SNI-based blocks, incl GoodbyeDPI which is pretty sophisticated. One still needs DoH because (unencrypted) DNS is the weakest link.

Then that's not SNI-based blocking.

Simple SNI-based blocking implementation may not consider complex data like fragmented packet, so some solutions work.

For me, and many others on Twitter, updating the DNS worked (I used 1.1.1.1). Though I'm not sure why.

Same for me, i changes DNS and it worked

Worked for me too!

Reply on news.ycombinator.com