The thing about domain fronting, is you have to use a heavyweight corporate entity's domain because for a would-be censor, blocking those domains would be 'over

The thing about domain fronting, is you have to use a heavyweight corporate entity's domain because for a would-be censor, blocking those domains would be 'overblocking' and their censorship wouldn't really work. It would be like blocking a bunch of Amazon, Cloudflare, Google IPs. The Internet basically would be unusable, so they have to allow these corporate mega-giants in their allowlist.