3 ms·

I found this quick read describing domain fronting interesting: http://blog.attackzero.net/2015/11/domain-fronting-and-you.html?m=1 http://blog.attackzero.net/2

• deleted 10y ago
  [deleted]
• duskwuff 10y ago
  Surely the real domain name of the service will appear in the server certificate?
  • temprature 10y ago
    The server returns the certificate of the name given in the SNI, which is the fronted domain, not the real one.
    • deleted 10y ago
      [deleted]
• NoGravitas 10y ago
  This article on [domain fronting][0] is very informative, though also quite long. [0]: https://www.bamsoftware.com/papers/fronting/ https://www.bamsoftware.com/papers/fronting/