2 ms·

Could you explain to me how "nibbleshifter" would use the "feature" for good? What are you losing here "nibbleshifter"? Why do you put infosec in scare quotes

• nibbleshifter 4y ago
  Evading censorship in less democratic countries, for a start. I've had to do this quite a number of times on my travels - and its even more important for people in the human rights field. Tor's "meek" pluggable transport uses domain fronting for this purpose. I work in the so called "infosec" field, and about half the field are myopic wankers who would readily sacrifice privacy wholesale to gain an ounce of so called security. Think: the kind of people who also want to cripple eSNI or DoH in the name of "network monitoring".
  • factsarelolz 4y ago
    > even more important for people in the human rights field. Historically these people and even journalists are targeted by Nation States utilizing Israeli made offense tools like Pegasus. Domain fronting would not help in these cases to avoid censorship, maybe but you are attempting to circumvent a Nation State with almost unlimited money and resources the target would never be able to have. Does it suck that domain fronting is gone? Yes. Is it a good thing it's gone? Yes. The fact is the people that used domain fronting for your use case is heavily heavily outweighed by malicious actors. One could argue that domain fronting and guns are the same. Why should I have my gun taken away when I am using it for legal purposes? Just because bad people use a gun for bad things I shouldn't be scrutinized for my legal use. I shouldn't have access taken away due to bad actors leveraging them for ill gotten gains.