[tor-bugs] #25804 [Obfuscation/Snowflake]: Domain fronting to App Engine stopped working

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Apr 19 12:36:49 UTC 2018


#25804: Domain fronting to App Engine stopped working
-----------------------------------+------------------------
 Reporter:  dcf                    |          Owner:  (none)
     Type:  defect                 |         Status:  new
 Priority:  Medium                 |      Milestone:
Component:  Obfuscation/Snowflake  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  moat                   |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+------------------------

Comment (by cypherpunks):

 Replying to [comment:17 djsf]:
 > https solution: use $WHATEVER.appspot.com (generated name or some
 popular application) instead of google.com to circumvent DNS censorship:
 >
 > wget -q -O - --content-on-error -S https://innocent-app.appsppot.com/
 --header 'Host: snowflake-reg.appspot.com'
 Censors will just block the front `innocent-app.appspot.com` (it's already
 blocked in China FWIW). ¯\_(ツ)_/¯

 And anyways, because of #22782 migrating from Google fronts is a
 necessity. DNS-over-HTTPS with `https://1.1.1.1/dns-query` and
 `https://1.0.0.1/dns-query (fallback in case 1.1.1.1 isn't reachable)`
 (not blocked in China) seems promising tho. So this seems like the best
 time to upgrade with both of those two solutions with the former acting as
 fallback (because 1.1.1.1 is free and a Amazon isn't).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25804#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list