[tor-bugs] #25804 [Obfuscation/Snowflake]: Domain fronting to App Engine stopped working
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu Apr 19 12:36:49 UTC 2018
#25804: Domain fronting to App Engine stopped working
-----------------------------------+------------------------
Reporter: dcf | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Obfuscation/Snowflake | Version:
Severity: Normal | Resolution:
Keywords: moat | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-----------------------------------+------------------------
Comment (by cypherpunks):
Replying to [comment:17 djsf]:
> https solution: use $WHATEVER.appspot.com (generated name or some
popular application) instead of google.com to circumvent DNS censorship:
>
> wget -q -O - --content-on-error -S https://innocent-app.appsppot.com/
--header 'Host: snowflake-reg.appspot.com'
Censors will just block the front `innocent-app.appspot.com` (it's already
blocked in China FWIW). ¯\_(ツ)_/¯
And anyways, because of #22782 migrating from Google fronts is a
necessity. DNS-over-HTTPS with `https://1.1.1.1/dns-query` and
`https://1.0.0.1/dns-query (fallback in case 1.1.1.1 isn't reachable)`
(not blocked in China) seems promising tho. So this seems like the best
time to upgrade with both of those two solutions with the former acting as
fallback (because 1.1.1.1 is free and a Amazon isn't).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25804#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list