Live data from Hacker News

Amazon threatens to suspend Signal's AWS account over censorship circumvention

signal.org

11–20 of 519 posts

Re: Amazon threatens to suspend Signal's AWS account over censorship circumvention

#12
post #4

Misleading headline? > Signal plans to make its traffic look like traffic from another site, (popularly known as “domain fronting”) by using a domain owned by Amazon -- Souq.com

I reckon with Amazon IPs being thrown indiscriminately in the bucket with Telegram they aren't keen to seeing a repeat of the same situation.

Re: Amazon threatens to suspend Signal's AWS account over censorship circumvention

#15
post #11

I still don't understand why would Google or Amazon care about this, and why it's against their ToS. Do they think that some of those states may block all kind of access to their IP blocks just because of some people using Signal?

> Do they think that some of those states may block all kind of access to their IP blocks just because of some people using Signal?

I think this is exactly the problem, yes.

Re: Amazon threatens to suspend Signal's AWS account over censorship circumvention

#16
post #4

Misleading headline? > Signal plans to make its traffic look like traffic from another site, (popularly known as “domain fronting”) by using a domain owned by Amazon -- Souq.com

The part you're missing is:

  ... to third parties.
They aren't spoofing the domain, they are just making sure that outside parties to an SSL connection will have a difficult time determining where that SSL connection is going. The two parties creating the SSL connection are not lying to each other, though.

Re: Amazon threatens to suspend Signal's AWS account over censorship circumvention

#17
post #11

I still don't understand why would Google or Amazon care about this, and why it's against their ToS. Do they think that some of those states may block all kind of access to their IP blocks just because of some people using Signal?

That's exactly what happened, so yes.

https://arstechnica.com/information-technology/2018/04/in-ef...

Re: Amazon threatens to suspend Signal's AWS account over censorship circumvention

#18
They're spoofing identity of non-consenting parties. The cause is noble, but it isn't what the headline would imply. Amazon isn't saying "You can't host encrypted services on our platform", they are saying "You can't use TLS and load balancing hacks to pretend to be us in oppresive countries".

And

>The idea behind domain fronting was that to block a single site, you’d have to block the rest of the internet as well. In the end, the rest of the internet didn’t like that plan.

That they interpret AWS and Google as "the rest of the Internet" is pretty sad, too.

Post reply on HN