5 ms·
That's called "domain fronting", the major cloud providers disallow it and enforce that the Host header must match the SNI.
by andreareina 7y ago
That's called "domain fronting", the major cloud providers disallow it and enforce that the Host header must match the SNI.
- yardstick 7y agoThis is likely the major reason why China has not yet blocked the major cloud providers. As soon as they allow ESNI/domain fronting, all bets are off as to what China will block.
- lostmsu 7y agoThey explicitly started doing this after Telegram used domain fronting to work around Russian censorship, which caused large chunks of AWS and GCP addresses to be blocked in Russia.