summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--patches/kazakhstan/notes.txt8
1 files changed, 8 insertions, 0 deletions
diff --git a/patches/kazakhstan/notes.txt b/patches/kazakhstan/notes.txt
new file mode 100644
index 0000000..0aa68ac
--- /dev/null
+++ b/patches/kazakhstan/notes.txt
@@ -0,0 +1,8 @@
+As described in #6045, we found that changing the cipher suite (from the
+default TLS1_TXT_DHE_RSA_WITH_AES_256_SHA (0x0039)) bypasses the
+censorship in Kazakhstan. The patch ethiopia/remove_0x0039.patch removes
+0x0039 from SERVER_CIPHER_LIST.
+
+The patch ethiopia/finalhello_skip.patch causes the final hello done TLS
+record to be sent in a separate packet. This also bypasses the
+censorship in Kazakhstan.