Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CDN's wet dream coming true #19

Open
ghost opened this issue Jan 25, 2019 · 3 comments
Open

CDN's wet dream coming true #19

ghost opened this issue Jan 25, 2019 · 3 comments

Comments

@ghost
Copy link

ghost commented Jan 25, 2019

That is at least on the surface reading of https://www.bleepingcomputer.com/news/google/google-chrome-adding-support-for-signed-http-exchanges/ and without having dug into details.

Perhaps not surprising that is being pushed by G and CF. So far M is not caving but will see how long that might last.

N.B. Noticed that development of this WX has slowed and efforts are invested into the other WX https://github.com/claustromaniac/poop/releases

Considering this development of SXG it would probably render further development of this WX rather futile anyway?

@ajvsol
Copy link

ajvsol commented Jan 30, 2019

Considering this development of SXG it would probably render further development of this WX rather futile anyway?

There would still be some way to identify whether a CDN is being used to deliver the website, all that changes is the URL. It's similar to how CloudFlare already works in hiding it's presence.

This means it's more important than ever for True Sight to exist and expose the MITM CDNs that are intercepting your browsing.

@ghost
Copy link
Author

ghost commented Feb 5, 2019

This means it's more important than ever for True Sight to exist and expose the MITM CDNs that are intercepting your browsing.

Sure, just the question whether the WX is still being developed or whether development has ceased, which seems currently the case considering the last code commit being 3 months ago

@claustromaniac
Copy link
Owner

Thank you for the info.

There would still be some way to identify whether a CDN is being used to deliver the website, all that changes is the URL. It's similar to how CloudFlare already works in hiding it's presence.

This is something we can expect. Besides, we can be sure not everyone will adopt those standards.

Sure, just the question whether the WX is still being developed or whether development has ceased, which seems currently the case considering the last code commit being 3 months ago

Development is still in a hiatus, but I've learned a bunch of new tricks and I've gathered (and am still gathering) a lot of information in the meantime with some tools I wrote for automating the process. I definitely hope to get back to working on this eventually, I just don't know when.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants