IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Google updates App Engine but kills anti-censorship feature

Software quirk Domain-Fronting ends up in the bone orchard

App developers will no longer be able to use Domain-Fronting on Google after the company's planned update to their App Engine killed off the practice, reported The Verge.

The update in Google's network architecture was first spotted by developers of privacy-minded web browser Tor. It removes an approach that services like encrypted messaging platform Signal, anti-Chinese censorship tool GreatFire.org, and VPN services offered by Psiphon depended upon.

Domain-Fronting is an essential technique used by dozens of internet freedom tools designed to allow users to work around state-level internet censorship.

It is used to bypass censors by using Google as a proxy, forwarding traffic to their own servers through a Google.com domain. Instead of allowing a service to directly communicate with a server, potentially hiding it from state-level internet censors who might identify and block the connection, the request is forwarded through an innocuous domain or IP address range.

This allows services that would otherwise have their traffic blocked skate under the censors by appearing to come from Google.

The operators of anti-censorship group GreatFire.org tweeted their frustration at Google's decision.

"Google could end online censorship everywhere, in the blink of an eye, if it wanted. It's frustrating to see half-hearted efforts come out of Jigsaw and now this," the group said. 

Google has taken a firm stance on the matter and will not go back on its decision. A spokesperson for the company told The Verge that the decision was part of a planned software update and that the practice was never supported by Google.

"Domain fronting has never been a supported feature at Google," a company representative said. "Until recently it worked because of a quirk of our software stack. We're constantly evolving our network, and as part of a planned software update, domain fronting no longer works. We don't have any plans to offer it as a feature."

Reinstating Domain-Fronting would essentially make it a feature. That would be welcomed by the many invaluable tools that help keep the internet open for people operating under oppressive governments, but this could open Google up to scrutiny from those same regimes and services that could be harmed by malicious domain fronting operations.

Image credit: Bigstock 

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Most Popular

Former Uber security chief to face fraud charges over hack coverup
data breaches

Former Uber security chief to face fraud charges over hack coverup

29 Jun 2022
Macmillan Publishers hit by apparent cyber attack as systems are forced offline
Security

Macmillan Publishers hit by apparent cyber attack as systems are forced offline

30 Jun 2022
Actively exploited server backdoor remains undetected in most organisations' networks
cyber attacks

Actively exploited server backdoor remains undetected in most organisations' networks

1 Jul 2022