News for hackers. Stuff that matters.

A comment on Amazon threatens to suspend Signal's AWS account over censorship circumvention. Parent comment

Re:Amazon threatens to suspend Signal's AWS account over cen... by textmode on Wednesday May 02, 2018 @12:36AM (#16974084)
Does this mean that Cloudfront does not actually require (correct) SNI?

Example: Sending HTTP request for signal.org over TLS to Cloudfront IP address with SNI as "allergan.com" returns signal.org web page, not allergan.com web page.

[ Parent | on HN ]
Re:Amazon threatens to suspend Signal's AWS account over cen... by computerfriend on Wednesday May 02, 2018 @08:14AM (#16976176)
Yes, this is the premise of domain fronting.
[ Parent | on HN ]