← Back to context

Comment by dlenski

7 hours ago

> IMHO cleve tricks like "domain fronting" is just freebooting

What do you mean by "freebooting"?

We added domain fronting support to the OpenConnect TLS-VPN client _in 2022_ because it is still working and useful for many people working in censored countries and environments. https://gitlab.com/openconnect/openconnect/-/merge_requests/...

> because it is still working

That's a big "still" and you don't loose anything in case the real owner of the "fronted" domain suffers loss.

  • I don't think it's right to assign blame here to any party other than the authoritarian regime that decides to block the whole CDN.