[tor-bugs] #25804 [Obfuscation/Snowflake]: Domain fronting to App Engine stopped working

[Tor Bug Tracker & Wiki]

#25804: Domain fronting to App Engine stopped working
-----------------------------------+------------------------
 Reporter:  dcf                    |          Owner:  (none)
     Type:  defect                 |         Status:  new
 Priority:  Medium                 |      Milestone:
Component:  Obfuscation/Snowflake  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:                         |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+------------------------

Comment (by yawning):

 Replying to [comment:6 dcf]:
 > Here is a cheesy proof of concept. It's not suitable because it disable
 certificate verification (`InsecureSkipVerify`). What's needed is another
 parameter to verify the certificate ''as if'' we had accessed
 www.google.com (or other specific domain).

 https://golang.org/pkg/crypto/tls/#Config (VerifyPeerCertificate)
 https://golang.org/pkg/crypto/x509/#Certificate.Verify

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25804#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online