7 ms·

Couldn't they ask people to donate their AWS instances or a portion of their webserver (or domain) resources to running a small outward facing webserver as a d

Couldn't they ask people to donate their AWS instances or a portion of their webserver (or domain) resources to running a small outward facing webserver as a dummy, making the domain look like its a real website (eCommerce etc) and then passing Signal data through a Shadowsocks (or something similar) proxy? Couldn't they develop an AMI that they hold the keys to that people could deploy with ease?

mabbo 8y ago
Those who wish to suppress Signal would just play whack-a-mole. They'd login to Signal, find what domains it was connecting to and then block those. To update Signal with new addresses constantly, you'd need a server hosting those updates- which would in turn be blocked immediately. The idea of using Souq.com or Google.com as the domain name in the TLS header was that even oppressive regimes won't block Google or Souq for their entire country.
- kombucha2 8y ago
  oh derrr
- s73v3r_ 8y ago
  >The idea of using Souq.com or Google.com as the domain name in the TLS header was that even oppressive regimes won't block Google or Souq for their entire country. Which, at least in the case of Russia, seems to be false.
cjbprime 8y ago
This has been explored by Tor, through a design sometimes called "flash proxy" and "snowflake". They used websockets and webrtc datachannels so that all you have to do to volunteer yourself as a relay is visit a webpage with JS enabled. The idea is to have many short-lived proxies on residential connections, paired with an announce mechanism.
cjbprime 8y ago
Amusing idea: use Bitcoin's blockchain as a peer announce mechanism. Does your country want to be involved in cryptocurrencies less than they want to censor? On second thought, the countries most interested in censoring are probably also the countries most interested in blocking people from using Bitcoin? :)

7 ms·

Couldn't they ask people to donate their AWS instances or a portion of their webserver (or domain) resources to running a small outward facing webserver as a d

by kombucha2 8y ago

mabbo 8y ago
Those who wish to suppress Signal would just play whack-a-mole. They'd login to Signal, find what domains it was connecting to and then block those. To update Signal with new addresses constantly, you'd need a server hosting those updates- which would in turn be blocked immediately. The idea of using Souq.com or Google.com as the domain name in the TLS header was that even oppressive regimes won't block Google or Souq for their entire country.
- kombucha2 8y ago
  oh derrr
- s73v3r_ 8y ago
  >The idea of using Souq.com or Google.com as the domain name in the TLS header was that even oppressive regimes won't block Google or Souq for their entire country. Which, at least in the case of Russia, seems to be false.
cjbprime 8y ago
This has been explored by Tor, through a design sometimes called "flash proxy" and "snowflake". They used websockets and webrtc datachannels so that all you have to do to volunteer yourself as a relay is visit a webpage with JS enabled. The idea is to have many short-lived proxies on residential connections, paired with an announce mechanism.
cjbprime 8y ago
Amusing idea: use Bitcoin's blockchain as a peer announce mechanism. Does your country want to be involved in cryptocurrencies less than they want to censor? On second thought, the countries most interested in censoring are probably also the countries most interested in blocking people from using Bitcoin? :)