3 ms·
Yes, domain fronting through Google App Engine is already helping Signal bypass censorship: https://whispersystems.org/blog/doodles-stickers-censorship/ https:/
by j_s 10y ago
Yes, domain fronting through Google App Engine is already helping Signal bypass censorship: https://whispersystems.org/blog/doodles-stickers-censorship/ https://whispersystems.org/blog/doodles-stickers-censorship/
Currently domain-based filtering is probably too small a proportion of traffic to even care about, but as ease-of-use comes to the masses there may come a point where the pro-ad side will implement this.
- Xylakant 10y agoAs far a I understand domain fronting works by sending a different host in the SNI header than later in the actual http request, thus hiding the actual requested host from an adversary watching the connection from the outside. This would require cooperation from the sending http stack, in this case the browser. I doubt that this is a viable option in this case.