Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Wednesday May 02 2018, @07:43PM   Printer-friendly
from the nowhere-to-hide dept.

Submitted via IRC for Fnord666

The team behind secure messaging app Signal says Amazon has threatened to drop the app if it doesn't stop using an anti-censorship practice known as domain-fronting. Google recently banned the practice, which lets developers disguise web traffic to look like it's coming from a different source, allowing apps like Signal to evade country-level bans. As a result, Signal moved from Google to the Amazon-owned Souq content delivery network. But Amazon implemented its own ban on Friday. In an email that Moxie Marlinspike — founder of Signal developer Open Whisper Systems — posted today, Amazon orders the organization to immediately stop using domain-fronting or find another web services provider.

Amazon has said that it's banning domain-fronting so malware purveyors can't disguise themselves as innocent web traffic. But Signal used the system to provide service in Egypt, Oman, and the United Arab Emirates (UAE), where it's officially banned. It got around filters by making traffic appear to come from a huge platform, since countries weren't willing to ban the entirety of a site like Google to shut down Signal.

Source: https://www.theverge.com/2018/5/1/17308508/amazon-web-services-signal-domain-fronting-ban-response

Also at TechCrunch and TechRepublic.

See also: A Google update just created a big problem for anti-censorship tools
APT29 Domain Fronting With TOR

Previously: Encrypted Messaging App Signal Uses Google to Bypass Censorship

Related: Open Whisper Systems Releases Standalone "Signal" Desktop App


Original Submission #1   Original Submission #2

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1, Interesting) by Anonymous Coward on Thursday May 03 2018, @06:02PM

    by Anonymous Coward on Thursday May 03 2018, @06:02PM (#675190)

    isn't this what stuff like VPNs, tor and i2p are for? maybe all these companies need to quit trying to work within the establishment system and work harder with people who are trying to build a decentralized, private alternative. I bet some of these projects could use more servers, lawyers and pay for devs. We should have whole armies of paid, young, idealist devs churning out code. instead of a few starving hackers doing it all alone, while sellouts fund the enemies of freedom.

    Starting Score:    0  points
    Moderation   +1  
       Interesting=1, Total=1
    Extra 'Interesting' Modifier   0  

    Total Score:   1