On Wed, 18 Jul 2018, 18:03 Kate Krauss, <ailanthus@riseup.net> wrote:

This is a helpful letter and domain fronting would probably benefit from
more public advocacy. The letter did not get much media coverage. There
will be lots of reporters at HOPE who may be interested and probably
more than one organization that benefits from domain fronting.

Hi Kate!

I stand by my criticism as posted at:

https://twitter.com/AlecMuffett/status/1019468247823978496

…in short: that DF is an ugly hack that relies on "SNI" - a feature of SSL which in daily life is leveraged to enable, not bypass, filtering and censorship.

It may be artfully ironic with DF to leverage SNI "for good", but it would probably be wiser to learn to live without either/both, instead encouraging wider adoption of the controversial "TLS 1.3" standard along with the draft "encrypted SNI" feature. 

This would be much more in keeping with the Tor ethos of "anonymity loves company". 

That any Civil Society organisation is calling for the retention of SNI, is a bit perverse.

-a