[tor-bugs] #25804 [Obfuscation/Snowflake]: Domain fronting to App Engine stopped working

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue May 1 21:06:19 UTC 2018


#25804: Domain fronting to App Engine stopped working
-----------------------------------+------------------------
 Reporter:  dcf                    |          Owner:  (none)
     Type:  defect                 |         Status:  new
 Priority:  Medium                 |      Milestone:
Component:  Obfuscation/Snowflake  |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  moat                   |  Actual Points:
Parent ID:                         |         Points:
 Reviewer:                         |        Sponsor:
-----------------------------------+------------------------

Comment (by cypherpunks):

 Replying to [comment:24 cypherpunks]:
 > Replying to [comment:23 cypherpunks]:
 > > [https://news.ycombinator.com/item?id=16869269 Rumors]:
 > > > Hey, everyone. We spent a decent amount of time at Signal trying to
 come up with alternatives when we first heard rumors that Google was
 disabling domain fronting on GAE.
 > Wow, maybe sometime in the future will start learning about Google
 deprecating this or that from SecureDrop leakers at the nytimes/bezos
 post. Truly epic that they didn't even bother to put a notice or
 something, not even a two line blog post. Maybe people should no longer
 base things off anything Google related, and maybe RMS was right.
 This is no longer accurate, Moxie did receive a 30 day notice and the
 reason isn't related to Telegram but following lobbying efforts to not
 block requests from the fine people in Iran,
 > In early 2018, a number of policy organizations increased pressure on
 Google to change their position on how they were interpreting US sanction
 law so that domain fronting would be possible from Iran. Sadly, these
 lobbying efforts seem to have had the opposite effect. When Google’s
 leadership became more aware of domain fronting, it generated internal
 conversations about whether they wanted to put themselves in the situation
 of providing cover for sites that entire countries wished to block.
 >
 > A month later, we received 30-day advance notice from Google that they
 would be making internal changes to stop domain fronting from working
 entirely.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25804#comment:32>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list