logoalt Hacker News

iancarrollyesterday at 7:13 PM1 replyview on HN

The GFW is certainly looking for traffic to block, but it is not really going to invade much privacy, as it cannot decrypt anything using HTTPS/TLS.


Replies

largbaeyesterday at 8:56 PM

GFW does indeed have man in the middle capabilities per the recent leaks of Geedge tech used in it. Your laptop might throw a warning for the fake signed cert, but devices in China that trust Chinese root CAs would not.