Skip to content

Add --sni option to the CLI, for domain fronting

Daniel Lenski requested to merge add_sni_option_for_domain_fronting into master

This option allows the user to override the hostname value presented as the SNI (Server Name Indication) for new TLS connections.

This may be useful for Domain Fronting, a technique by which some filtered or censored Internet connections can be bypassed.

Note that sending different values for the SNI and 'Host:' header violates HTTP standards, is prevented by many cloud hosting providers, AND will cause the server to send a certificate for the wrong domain name (thus requiring the use of --servercert).

Merge request reports