search

claustromaniac / detect-cloudflare-plus

True Sight Firefox extension.
https://addons.mozilla.org/firefox/addon/detect-cloudflare-plus/
GNU General Public License v3.0
37 stars 3 forks source link

CDN's wet dream coming true #19

Open ghost opened 5 years ago

ghost commented 5 years ago

That is at least on the surface reading of https://www.bleepingcomputer.com/news/google/google-chrome-adding-support-for-signed-http-exchanges/ and without having dug into details.

Perhaps not surprising that is being pushed by G and CF. So far M is not caving but will see how long that might last.

N.B. Noticed that development of this WX has slowed and efforts are invested into the other WX https://github.com/claustromaniac/poop/releases

Considering this development of SXG it would probably render further development of this WX rather futile anyway?

ajvsol commented 5 years ago

Considering this development of SXG it would probably render further development of this WX rather futile anyway?

There would still be some way to identify whether a CDN is being used to deliver the website, all that changes is the URL. It's similar to how CloudFlare already works in hiding it's presence.

This means it's more important than ever for True Sight to exist and expose the MITM CDNs that are intercepting your browsing.

ghost commented 5 years ago

This means it's more important than ever for True Sight to exist and expose the MITM CDNs that are intercepting your browsing.

Sure, just the question whether the WX is still being developed or whether development has ceased, which seems currently the case considering the last code commit being 3 months ago

claustromaniac commented 5 years ago

Thank you for the info.

There would still be some way to identify whether a CDN is being used to deliver the website, all that changes is the URL. It's similar to how CloudFlare already works in hiding it's presence.

This is something we can expect. Besides, we can be sure not everyone will adopt those standards.

Sure, just the question whether the WX is still being developed or whether development has ceased, which seems currently the case considering the last code commit being 3 months ago

Development is still in a hiatus, but I've learned a bunch of new tricks and I've gathered (and am still gathering) a lot of information in the meantime with some tools I wrote for automating the process. I definitely hope to get back to working on this eventually, I just don't know when.