Thread

1. SoftTalker · 1790960547 · focus · HN ↗

   > platforms are left with an impossible choice: completely block all VPN traffic nationwide or withdraw access from Utah entirely

   Is it even possible to reliably know that a connection is from a VPN? Anyone can proxy through a random hosting provider.

   1. greyface- · 1790971103 · focus · HN ↗

      TCP MSS < 1500 bytes can be a tell, although it will sometimes falsely identify non-"VPN" tunnels.

      1. eptcyka · 1790973670 · focus · HN ↗

         There are sooo many people out there who are clamped to something far lower than 1500. MTUs below 1280 are not that exotic either.

         On the other hand, using Masque for TCP transfers will probably fool a server to believe the MSS is 1500.

Unofficial Hacker News client; not affiliated with Y Combinator.