Pi-hole – A black hole for Internet advertisements

Re:Pi-hole – A black hole for Internet advertisements by j_s on Monday March 13, 2017 @11:39AM (#13858733)

Yes, domain fronting through Google App Engine is already helping Signal bypass censorship: https://whispersystems.org/blog/doodles-stickers-censorship/

Currently domain-based filtering is probably too small a proportion of traffic to even care about, but as ease-of-use comes to the masses there may come a point where the pro-ad side will implement this.

[ Parent | on HN ]

Re:Pi-hole – A black hole for Internet advertisements by Xylakant on Monday March 13, 2017 @12:39PM (#13859429)

As far a I understand domain fronting works by sending a different host in the SNI header than later in the actual http request, thus hiding the actual requested host from an adversary watching the connection from the outside.

This would require cooperation from the sending http stack, in this case the browser. I doubt that this is a viable option in this case.

[ Parent | on HN ]