4 ms·

There's domain fronting [1] and http/2 certificate frames [2] - they are conceptually similar. [1]: https://www.bamsoftware.com/papers/fronting/ https://www.ba

There's domain fronting [1] and http/2 certificate frames [2] - they are conceptually similar. [1]: https://www.bamsoftware.com/papers/fronting/ https://www.bamsoftware.com/papers/fronting/ [2]: https://tools.ietf.org/html/draft-bishop-httpbis-http2-additional-certs-05 https://tools.ietf.org/html/draft-bishop-httpbis-http2-addit...

gruez 9y ago
both of them seem to use the concept of "connect via a fake domain name, then connect to the real domain". i'm not sure how this is scaleable for everyday browsing. you might be able to find the fronting server for wikipedia, but how are you going to find the fronting server for every website you're visiting? this solves the problem of censorship, but not the problem of ISP surveillance.