4 ms·
Encrypted protocols are often not fully encrypted, and expose enough to determine the nature of the traffic, if not the content. Even TLS, leaving Server Name I
by gnode 8y ago
Encrypted protocols are often not fully encrypted, and expose enough to determine the nature of the traffic, if not the content. Even TLS, leaving Server Name Indication (SNI) unencrypted. Fortunately there is work underway to encrypt SNI. Also, in the TLS case, domain fronting (asking for e.g. google.com from the discriminated service, to fool filters) has become one tool to evade SNI-based attacks.
- xnyanta 8y ago>domain fronting [...] has become one tool to evade SNI-based attacks. Unfortunately, most major CDNs like Google and Amazon have stopped offering domain fronting capabilities. I think Azure is one of the major services that stills supports it however.
- codedokode 8y agoIf they would not stop this they could be blocked in Russia completely (because Russian authorities started banning whole networks where Telegram servers or proxies were found).
- vbezhenar 8y agoMicrosoft is known to cooperate with governments. I'm sure that they'll stop domain fronting if asked.