Live data from Hacker News

Tell HN: Domain fronting to be blocked on Azure

news.ycombinator.com

41–50 of 132 posts

Re: Tell HN: Domain fronting to be blocked on Azure

#41
post #36

Earlier quoted context omitted.

It's pretty hard to stab people with rocks, especially multiple people.

Generations of Native Americans beg to differ.

The native-american generations population probably doesn't intersect with the population of teenage knife-wielding attackers in london, which is what we're talking about.

Then again, if you want to argue stone-age semantics: we can't ban anything and should just resort to continuous murder since rule-based society is too hard.

Re: Tell HN: Domain fronting to be blocked on Azure

#42
post #34
post #13

Earlier quoted context omitted.

If you want to hide your domain name you can use eSNI. Keep in mind another name for censorship is moderation, it isn't just signal that uses it bad guys also abuse it and it was not a feature explicitly built to avoid censorship but more like a bug people were abusing.

>Keep in mind another name for censorship is moderation No it's not, see https://news.ycombinator.com/item?id=33446064 On most social media sites they're implemented the same way (ie. posts deleted/hidden from other users), but the objectives are totally different.

Let me rephrase then: what one calls censorship another might call moderation. The difference is authority to remove of hide content, if you have it then it is moderation. So, to be controversial for the sake or discussion then, Russia blocking Signal is moderation within the realm of their authority as is Iran blocking content they don't like or the US gov seizing domains. Either way, domain fronting was never an explicit feature anyone supported.

Re: Tell HN: Domain fronting to be blocked on Azure

#43
post #13

Earlier quoted context omitted.

If you want to hide your domain name you can use eSNI. Keep in mind another name for censorship is moderation, it isn't just signal that uses it bad guys also abuse it and it was not a feature explicitly built to avoid censorship but more like a bug people were abusing.

It’s too late. Whole countries block all eSNI requests, so it’s always going to fail open.

Well then hopefully tech people will soon wrap their head around the fact that political problems are best solved politically. You can't write tech that overrides the authority of governments but you can override or change governments.

Re: Tell HN: Domain fronting to be blocked on Azure

#44

For anyone else wondering what domain fronting is: > Domain fronting is a technique for Internet censorship circumvention that uses different domain names in different communication layers of an HTTPS connection to discreetly connect to a different target domain than is discernable to third parties monitoring the requests and connections. https://en.wikipedia.org/wiki/Domain_fronting Cool, so we are bowing down furth…

We have ECH (previously known as ESNI) now, is that not just domain fronting in a new form?

Only for the legal stuff... so you will still get complaining comments.

Re: Tell HN: Domain fronting to be blocked on Azure

#45
post #17
post #12

Earlier quoted context omitted.

That definition is incomplete. Threat actors also abuse this to hide their command and control infrastructure.

Threat actors use knives to stab people - we have to stop selling those.

Talk about a strawman. Knives have utiltiy which is a feature. Domain fronting is a bug not a supported feature.

Re: Tell HN: Domain fronting to be blocked on Azure

#47
post #17

Earlier quoted context omitted.

Threat actors use knives to stab people - we have to stop selling those.

In the UK if you're under age and you decided to buy a knife you will have a lot of difficulty unless it's a little folding (but non-locking) pocket knife, like the small Swiss Army type utility knives. Indeed legally as old as 17 you can't even buy a steak knife in England although you can in Scotland. Once you've bought a knife, it will usually be illegal to carry it in public unless you have a good reason, and "se…

I'm not trying to be an asshole, but we don't get much info from UK here besides things like the Queen dying, so I have to ask, Does it work?

I mean, are instances of kids The reason I'm asking is because as a kid, if I had been told to not do something, I'd just find a way to do it. Not to use it, but to find loopholes and just say, _so what?, I can do x_

Re: Tell HN: Domain fronting to be blocked on Azure

#48
post #47

Earlier quoted context omitted.

In the UK if you're under age and you decided to buy a knife you will have a lot of difficulty unless it's a little folding (but non-locking) pocket knife, like the small Swiss Army type utility knives. Indeed legally as old as 17 you can't even buy a steak knife in England although you can in Scotland. Once you've bought a knife, it will usually be illegal to carry it in public unless you have a good reason, and "se…

I'm not trying to be an asshole, but we don't get much info from UK here besides things like the Queen dying, so I have to ask, Does it work? I mean, are instances of kids The reason I'm asking is because as a kid, if I had been told to not do something, I'd just find a way to do it. Not to use it, but to find loopholes and just say, _so what?, I can do x_

It absolutely does not work. Violence finds a way.
Post reply on HN