Only the DNS lookups. Not the content of what you’re viewing over https. Everything after domain name is encrypted
https://en.wikipedia.org/wiki/Server_Name_Indication
Server Name Indication payload is not encrypted, thus the hostname of the server the client tries to connect to is visible to a passive eavesdropper. This protocol weakness was exploited by security software for network filtering and monitoring[4][5][6] and governments to implement censorship.[7] Presently, there are multiple technologies attempting to hide Server Name Indication.
Also some countries may mandate users to install and trust government's CA certificate which is then used to MITM HTTPS traffic
https://en.wikipedia.org/wiki/Kazakhstan_man-in-the-middle_a...
If you have installed a root cert to allow the government to MITM, then there isn't really anything you can do...
dont forget that if certain SNI is detected, your ISP/government may try to force downgrade TLS or replace server-hello with their own cert - meaning you will need to install government certificate to browse certain websites and 99% of users will do that to get access
https://kotaku.com/on-pornhub-math-teacher-makes-his-mark-te...
> going to pornhub.com or definitelynotgayporn.net would arouse suspicion in a government that is banning such behavior
dns blocking doesn't mean adults are banned from visiting porn sites. You start by contradicting your initial concession of assuming this is 100% accurate.
> and could cause a person to be under higher scrutiny. So even if you're right that the DNS bypass isn't what would technically get them in trouble, I think you can understand the motivation to encrypt your DNS traffic to ensure that you don't get a target painted on your back.
This is a prime example of Fear and uncertainty.
> And given this, I hope how you can understand that your comment does very little to contribute to the actual conversation and can even potentially mislead others. A lot of communication is implicit (otherwise it'd be incredibly cumbersome)
And this is doubt. Never fails to accompany the other two.
Those idiots tried to block google docs once.
It didn't go well as you might imagine. ERs, research institutes and several government facilities responded with cordial letters about the court's mental state. Then it was unblocked.
The reason they get to keep the porn bans is because it isn't enforced upon adults, and it does serve as a thin layer of protection against minors.