You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
deps: bump radiance/domainfront/kindling (legit SNI for fronting) (#8886)
radiance -> v0.0.0-20260625003855-687d6be3d5f0 (getlantern/radiance#539)
domainfront -> v0.0.0-20260625001429-518c0256669b (getlantern/domainfront#11)
kindling -> v0.0.0-20260625002640-7cdf7184420c (getlantern/kindling#41)
Final link in the chain that lets fronting send a legit SNI instead of
the conspicuous no-SNI clients use today: ExpandedProvider applies the
default frontingsnis strategy with no country code (akamai sends its
arbitrary SNIs globally), preserves a baked-in per-masquerade SNI (aliyun
www.mobgslb.tbcache.com), and verifies the SNI-path edge cert against the
front Domain rather than chain-only. go build/vet clean; only go.mod and
go.sum change.
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
0 commit comments