Re: [tor-dev] Domain Fronting, Meek, Cloudflare, and Encrypted SNI...

2018-09-24 Thread David Fifield
On Mon, Sep 24, 2018 at 01:46:10PM -0400, Nathaniel Suchy wrote: > What this means: > Effectively domain fronting works by sending a different SNI and host header. > CDN providers like Cloudflare started double checking to make governments > happy, scratch that line, I mean to protect their custome

[tor-dev] I

2018-09-24 Thread john loughlin
Sent from my iPhone b ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev

Re: [tor-dev] Domain Fronting, Meek, Cloudflare, and Encrypted SNI...

2018-09-24 Thread David Fifield
On Mon, Sep 24, 2018 at 01:46:10PM -0400, Nathaniel Suchy wrote: > Why this matters: > With the right adjustments for TLS 1.3 and Encrypted SNI support, Cloudflare > may be a viable option for Meek. > > Risks: > * Firewall products could always use DPI and block TLS 1.3 altogether. > * Firewall pr

Re: [tor-dev] Domain Fronting, Meek, Cloudflare, and Encrypted SNI...

2018-09-24 Thread Tom Ritter
On Mon, Sep 24, 2018, 12:46 PM Nathaniel Suchy wrote: > Hi everyone, > > Cloudflare has added support to TLS 1.3 for encrypted server name > indication (SNI). This mailing list post is a high level overview of how > meek could take advantage of this in relation to Cloudflare who until just > now

[tor-dev] Domain Fronting, Meek, Cloudflare, and Encrypted SNI...

2018-09-24 Thread Nathaniel Suchy
Hi everyone, Cloudflare has added support to TLS 1.3 for encrypted server name indication (SNI). This mailing list post is a high level overview of how meek could take advantage of this in relation to Cloudflare who until just now wasn’t an option for domain fronting. What this means: Effectively

Re: [tor-dev] Memory usage on 0.3.4.8

2018-09-24 Thread nusenu
Hi r1610091651, thanks for your report. please add that information and your OS+version to https://trac.torproject.org/projects/tor/ticket/27813 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu signature.asc Description: OpenPGP digital signature _

[tor-dev] Memory usage on 0.3.4.8

2018-09-24 Thread r1610091651
Hi devs After upgrade from 3.3.7 -> 3.4.8, I've noticed that memory usage is erratic. Please consult the image below, showing memory available in green and memory used in blue on a tor dedicate system. [image: image.png] The upgrade to 3.4.8 took place on Saturday in week 37. The connection coun