17.04 beta and TLS

[mevla]

"The biggest change in this update is*full support for secure TLS communication* on port 443, now available on both PC and Mac. This should help resolve communication issues for customers in countries with restrictive firewalls, such as China, Russia, the UAE, Vietnam, and others."

I don't get, really. While I do not know how the Chinese (Russian) 'firewall' is configured, I do know that I can prevent ANY ingress traffic on ALL ports. You know, there are so many new Chinese engineers every year out of universities in China.

When you, as proprietary makers of software, can use any port you'd wish to use for TLS, you've chosen the standard 443 port that everybody, and their aunts and uncles, know. Granted, any port using TLS can be identified as such, might as well use 443 but, I do not see the basis for your argument that TLS on 443 will help with "communication issues for customers in countries with restrictive firewalls, such as China, Russia, the UAE, Vietnam, and others."

As if these governments had no idea what TLS is and are easily defeated by simply encrypting communications. Wouldn't a VPN used by these customers be more helpful ?

How about a Melda VPN for these customers ? MVPNMB ? It has to be multi-band !

[martin-meldaproduction]

Without TLS, traffic from MPluginManager and MeldaProduction plugins was often completely blocked in many regions by default. As a result, users were forced to rely on the offline version only.

I know that, for example, in China many users have VPNs—but not everyone does, since VPNs operate in a legal grey area. So there are many users out there:

- without a VPN at all
- with a VPN, but a weak one that doesn't support raw HTTP communication (port 80)
- with a VPN, but unwilling or too lazy to reconfigure it
- with an ISP that blocks traffic or where packets are altered somewhere along the line

…and so on.

All of this led to a significant number of support tickets. With the new implementation, I hope we can get through more smoothly and have more time to focus on creative work. We now have many more options for configuring the connection if issues arise.

Of course, we don’t fully understand how something like China’s Great Firewall works internally, but we’re doing our best to use the most common and compatible settings to get around it.

[ggio77]

Hi Martin, a few days ago I sent you an e-mail with a request for a small modification to the NAM module of MGA, did you get a chance to read it? Are those modifications feasible?

[martin-meldaproduction]

Hi Martin, a few days ago I sent you an e-mail with a request for a small modification to the NAM module of MGA, did you get a chance to read it? Are those modifications feasible?

I cannot find this email from some reason, can you resend to martin@meldaproduction.com?

[ggio77]

Forwarded