Let's say customer A got a server cert on Azure for bank_example.com and customer B got a cert on Azure for nsfw_example.com With domain fronting you may get '

Let's say customer A got a server cert on Azure for bank_example.com and customer B got a cert on Azure for nsfw_example.com With domain fronting you may get 'nsfw_example.com' content from a TLS connection negotiated with 'bank_example.com'. This can be a security threat (not able to properly filter outbound traffic) and customer A may be unhappy about Azure allowing nsfw content to be distributed over a channel secured under the name of their bank.