Lawmakers Call On Amazon and Google To Reconsider Ban On Domain Fronting (cyberscoop.com)
An anonymous reader quotes CyberScoop: Amazon and Google face sharp questions from a bipartisan pair of U.S. senators over the tech giants' decisions to ban domain fronting, a technique used to circumvent censorship and surveillance around the world. Sen. Ron Wyden, D-Ore., and Sen. Marco Rubio, R-Fla., sent a letter on Tuesday to Google CEO Larry Page and Amazon CEO Jeff Bezos over decisions by both companies in April to ban domain fronting.
Amazon then warned the developers of encrypted messaging app Signal that the organization would be banned from Amazon's cloud services if the service didn't stop using Amazon's cloud as cover. "We respectfully urge you to reconsider your decision to prohibit domain fronting given the harm it will do to global internet freedom and the risk it will impose upon human rights activists, journalists, and others who rely on the internet freedom tools," the senators wrote.
Amazon then warned the developers of encrypted messaging app Signal that the organization would be banned from Amazon's cloud services if the service didn't stop using Amazon's cloud as cover. "We respectfully urge you to reconsider your decision to prohibit domain fronting given the harm it will do to global internet freedom and the risk it will impose upon human rights activists, journalists, and others who rely on the internet freedom tools," the senators wrote.
But only after he's sentenced to die in Federal prison, a traitor.
"We won't be able to intercept all that juicy prohibited traffic and find out who's being naughty"
compromat
I think I got that wrong, politicians want Amazon to enable people to circumvent censorship and country lockouts?
Did the RIAA check bounce?
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
And they want it to look like something else.
The 'good' of domain fronting is NOTHING compared to the evil that can be done with it. No fuck you stupid lawmakers.
I'm guessing they want to use this for their astroturf campaigns against trump. No that's not a shitty shareblue site at all!
Domain Fronting & malware using it (vs. https use for 'security' (always gets broken thru anyhow just like certs do (or stolen)): It's a possibility to use it for that too...
HOWEVER: I'd wager HARDCODED FAVORITE SITES hosts can let you do (& my hosts engine places them @ the TOP of hosts for fastest possible resolution locally vs. security-issue riddled DNS that's slower) would make you safe vs. this crap (it avoids DNS).
ACCEPT NO SUBSTITUTE for more speed/safety/reliability & even more anonymity via APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download)
APK
P.S.=> THINK ABOUT IT (it can SAY it's 1 domain but by the time it hits the TLS layer it's really pointing at another (one that's MALICIOUS))... apk
Domain fronting may be useful for circumvent censorship and surveillance, but fact is that it is used mostly for criminal behavior.
So we either stop the usage or just accept that criminals will be the primary users of the service.
Mr. Marlinspike needs to reconsider distributed networks and federation. It's the only way forward.
... don't touch that, OK?
That's a capitalism of a different colour.
It little behooves the best of us to comment on the rest of us.
Domain Fronting & malware using it (vs. https use for 'security' (always gets broken thru anyhow just like certs do (or stolen)): It's a possibility to use it for that too...
HOWEVER: I'd wager HARDCODED FAVORITE SITES hosts can let you do (& my hosts engine places them @ the TOP of hosts for fastest possible resolution locally vs. security-issue riddled DNS that's slower) would make you safe vs. this crap (it avoids DNS).
ACCEPT NO SUBSTITUTE for more speed/safety/reliability & even more anonymity via APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download)
APK
P.S.=> THINK ABOUT IT (it can SAY it's 1 domain but by the time it hits the TLS layer it's really pointing at another (one that's MALICIOUS))... apk
See subject: You've hit on the SAME thing I was thinking here https://yro.slashdot.org/comme...
* "Great minds think alike"
APK
P.S.=> Always 2 sides to every razor... apk
Domain Fronting & malware using it (vs. https use for 'security' (always gets broken thru anyhow just like certs do (or stolen)): It's a possibility to use it for that too...
HOWEVER: I'd wager HARDCODED FAVORITE SITES hosts can let you do (& my hosts engine places them @ the TOP of hosts for fastest possible resolution locally vs. security-issue riddled DNS that's slower) would make you safe vs. this crap (it avoids DNS).
ACCEPT NO SUBSTITUTE for more speed/safety/reliability & even more anonymity via APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download).
APK
P.S.=> THINK ABOUT IT (it can SAY it's 1 domain but by the time it hits the TLS layer it's really pointing at another (one that's MALICIOUS))... apk
See subject: You've hit on the SAME thing I was thinking here https://yro.slashdot.org/comme...
* "Great minds think alike"!
APK
P.S.=> Always 2 sides to every razor... apk
What if somebody released a story suggesting domain fronting was by TLA's to spy on americans? How would Wyden and Rubio be treating that? Would they touch that with a 1000 foot barge pole?
Must be elections coming up
You're a Deep State bootlicker, so I assume you know.
Marlinspike created one of the most widely-used secure communication protocols in human history, then raised $50MM for future growth into a new non-profit. Way forward? It looks like he's winning pretty hard already.
Domain Fronting & malware using it (vs. https use for 'security' (always gets broken thru anyhow just like certs do (or stolen)): It's a possibility to use it for that too...
HOWEVER: I'd wager HARDCODED FAVORITE SITES hosts can let you do (& my hosts engine places them @ the TOP of hosts for fastest possible resolution locally vs. security-issue riddled DNS that's slower) would make you safe vs. this crap (it avoids DNS)...
ACCEPT NO SUBSTITUTE for more speed/safety/reliability & even more anonymity via APK Hosts File Engine 2.0++ 64-bit for Linux h t t p : / / a p k . i t - m a t e . c o . u k / A P K H o s t s F i l e E n g i n e F o r L i n u x . z i p (remove spaces between characters & download).
APK
P.S.=> THINK ABOUT IT (it can SAY it's 1 domain but by the time it hits the TLS layer it's really pointing at another (one that's MALICIOUS))... apk
Did you even read the article?