[tor-bugs] #25804 [Obfuscation/Snowflake]: Domain fronting to App Engine stopped working

[Tor Bug Tracker & Wiki]

#25804: Domain fronting to App Engine stopped working
-----------------------------------+------------------------
 Reporter:  dcf                    |          Owner:  (none)
     Type:  defect                 |         Status:  new
 Priority:  Medium                 |      Milestone:
Component:  Obfuscation/Snowflake  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  moat                   |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+------------------------

Comment (by twim):

 Hi there,

 It turns out that AppEngine is not the only option for domain fronting
 with Google.
 Google also provides a service called
 [https://developers.google.com/amp/cache/ AMP cache] for
 [https://ampproject.org/ AMP pages]. What it basically does is proxying
 random pages on the Internet and making them load faster (e.g. on Google
 search results). It requires pages to comply with some format though and
 also strips invisible content, resizes images, etc.
 Despite it is being served via different domain names (one per real
 domain) it is still hosted at Google infrastructure which can be fronted.

 I wrote a [https://github.com/nogoegst/amper library] that implements
 wrappers around AMP cache for tunneling traffic through it.
 I've also made a hacky pluggable transport thing as a PoC and managed to
 bootstrap tor using it. Have to say that no one should ever use AMP cache
 as an actual PT because it makes tons of requests (so you will probably be
 banned by Google) and it is incredibly slow.

 I guess that this can be a pretty good fit for both Moat and Snowflake use
 cases.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25804#comment:25>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online