Comment by dlenski
14 days ago
> IMHO cleve tricks like "domain fronting" is just freebooting
What do you mean by "freebooting"?
We added domain fronting support to the OpenConnect TLS-VPN client _in 2022_ because it is still working and useful for many people working in censored countries and environments. https://gitlab.com/openconnect/openconnect/-/merge_requests/...
> What do you mean by "freebooting"?
https://en.m.wikipedia.org/wiki/Filibuster_(military)
Private attempts to meddle in the security and interests of states.
> because it is still working
That's a big "still" and you don't loose anything in case the real owner of the "fronted" domain suffers loss.
I don't think it's right to assign blame here to any party other than the authoritarian regime that decides to block the whole CDN.