3 ms·
I expect this will only work until the government in question is sufficiently angered that they just outright block the entire AWS infrastructure. Or whoever el
by yardstick 7y ago
I expect this will only work until the government in question is sufficiently angered that they just outright block the entire AWS infrastructure. Or whoever else supports ESNI.
- Spivak 7y agoBut the only reason domain fronting works in the first place is because people think that large web hosting providers are too large to block. If a hypothetical tyrantical government was willing to block all of Amazon S3 this change doesn't affect anything.
- yardstick 7y agoIf it impacted Amazon’s (or whoever is targeted) bottom line then I would expect they would be open to dropping domain fronting support. But I admit I don’t know this for sure - time will tell. China has blocked GitHub and Akamai before. https://www.latimes.com/business/technology/la-fi-tn-great-firewall-china-censorship-20141126-story.html https://www.latimes.com/business/technology/la-fi-tn-great-f...
- shawnz 7y agoBut the alternative, which is to just not force this virtual host change in the first place, similarly might have gotten AWS blocked from those countries anyway