Previous discussion: https://news.ycombinator.com/item?id=16868564 https://news.ycombinator.com/item?id=16868564 As was brought up in the previous thread, thou

Previous discussion: https://news.ycombinator.com/item?id=16868564 https://news.ycombinator.com/item?id=16868564 As was brought up in the previous thread, though only briefly mentioned in the linked article, domain fronting is used by malware as well. It was allegedly exploited by Russian state-sponsored hacking group APT29.[0][1] It's unfortunate that it can't be used to help avoid censorship either now, but it was never an intended feature. As the article quotes, other CDNs such as Cloudfront also do not support domain fronting. [0]: https://www.fireeye.com/blog/threat-research/2017/03/apt29_domain_frontin.html https://www.fireeye.com/blog/threat-research/2017/03/apt29_d... [1]: https://www.cyberark.com/threat-research-blog/red-team-insights-https-domain-fronting-google-hosts-using-cobalt-strike/ https://www.cyberark.com/threat-research-blog/red-team-insig...