The process listening to IPs that resolve as signal.org must not have alternative hosts on it, since the web server can’t choose a certificate based on anything

The process listening to IPs that resolve as signal.org must not have alternative hosts on it, since the web server can’t choose a certificate based on anything but IP. Now the censor can just block your IP.