Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Domain fronting to be blocked on Azure

news.ycombinator.com

Post reply on HN
Print view View original

21–30 of 132 posts

Re: Tell HN: Domain fronting to be blocked on Azure

#21

Post by saddlerustle »

_8j50 wrote: post #13
nibbleshifter wrote: post #11

Well, that sucks. What's worse is it is wankers in the "infosec" industry that pushed MS to do this (or at least, are taking credit for it).

If you want to hide your domain name you can use eSNI. Keep in mind another name for censorship is moderation, it isn't just signal that uses it bad guys also abuse it and it was not a feature explicitly built to avoid censorship but more like a bug people were abusing.

It’s too late. Whole countries block all eSNI requests, so it’s always going to fail open.

Re: Tell HN: Domain fronting to be blocked on Azure

#22

Post by coldsauce »

saddlerustle wrote: post #21
_8j50 wrote: post #13

Earlier quoted context omitted.

If you want to hide your domain name you can use eSNI. Keep in mind another name for censorship is moderation, it isn't just signal that uses it bad guys also abuse it and it was not a feature explicitly built to avoid censorship but more like a bug people were abusing.

It’s too late. Whole countries block all eSNI requests, so it’s always going to fail open.

Yeah, I believe China doesn't even allow TLSv1.3

Re: Tell HN: Domain fronting to be blocked on Azure

#24

Post by xeromal »

lzooz wrote: post #17
_8j50 wrote: post #12

Earlier quoted context omitted.

That definition is incomplete. Threat actors also abuse this to hide their command and control infrastructure.

Threat actors use knives to stab people - we have to stop selling those.

There's an argument to be made for that. See, the UK.

Re: Tell HN: Domain fronting to be blocked on Azure

#25

Post by chitowneats »

xeromal wrote: post #24
lzooz wrote: post #17

Earlier quoted context omitted.

Threat actors use knives to stab people - we have to stop selling those.

There's an argument to be made for that. See, the UK.

Sure. Might be hard for people to do certain manual labor jobs without access to sharp objects. I'm sure they'll figure it out.

We'll have to ban rocks next though.

Re: Tell HN: Domain fronting to be blocked on Azure

#27

Post by throwaway0x7E6 »

616c wrote: post #19
throwaway0x7E6 wrote: post #9

Earlier quoted context omitted.

sure, it was merely a coincedence that they've started doing it after russian minitrue telegram fiasco. our venerable corporations would never bend to the will of foreign dictators.

Separate of whether the correlation is correct do you or anyone have info on the Telegram minitrue issue? I was unaware and don't really use Telegram.

they've attempted to block it several years ago, likely due to its popularity among dissidents and/or refusal to cooperate with russian Disinformation Governance Board. they've botched it and a lot of unrelated services got blocked as well. they gave up and stopped trying.

Re: Tell HN: Domain fronting to be blocked on Azure

#28

Post by deepsun »

weberer wrote: post #18
codetrotter wrote: post #7

For anyone else wondering what domain fronting is: > Domain fronting is a technique for Internet censorship circumvention that uses different domain names in different communication layers of an HTTPS connection to discreetly connect to a different target domain than is discernable to third parties monitoring the requests and connections. https://en.wikipedia.org/wiki/Domain_fronting Cool, so we are bowing down furth…

They've been waging this war for a couple years now. I guess they finally got to every cloud provider. Some related reading: "Amazon and Google bow to Russian censors in Telegram battle" https://www.fastcompany.com/40568177/amazon-and-google-bow-t... "U.S. Cloud Providers Face Backlash From China’s Censors" https://www.wsj.com/articles/u-s-cloud-providers-face-backla... https://archive.ph/qhFQ5 >China’s Internet cens…

I still see Cloudflare.

Re: Tell HN: Domain fronting to be blocked on Azure

#29

Post by oneplane »

chitowneats wrote: post #25
xeromal wrote: post #24

Earlier quoted context omitted.

There's an argument to be made for that. See, the UK.

Sure. Might be hard for people to do certain manual labor jobs without access to sharp objects. I'm sure they'll figure it out. We'll have to ban rocks next though.

It's pretty hard to stab people with rocks, especially multiple people.
Post reply on HN