How is Airtel Blocking Even https:// Sites?

[Sushubh]

if it does not work with https... VPN is probably the only alternative.
dns services usually do not change this behavior.

 

[warpspeed]

Airtel and other ISP's are blocking https sites by blacklisting the SNI which is usually sent in plain text before the actual encryption happens. VPN seems to be the last resort.

 

[Sushubh]

would dns over https (or tls?) fix this issue?

 

[warpspeed]

Not really. Using cloudflare DNS over https for the past few months and It has been a hit and miss. Some sites work and while some don't. It all depends on how often they update their blacklist

 

[Sushubh]

i thought you needed to something more to get secure dns. android p has integrated support. windows require usage of third party app like dnscrypt?

 

[warpspeed]

Yes! Android P supports only DNS over TLS and has been standardized recently. It could take some time for widespread adoption. DNSCrypt on the other hand works slightly different and it is not a standard. Probably that's why there wasn't any vendor support.