Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some Signal domains not proxied when censorship circumvention is on #13682

Open
4 tasks done
UjuiUjuMandan opened this issue Sep 11, 2024 · 0 comments
Open
4 tasks done

Comments

@UjuiUjuMandan
Copy link

UjuiUjuMandan commented Sep 11, 2024


Bug description

signal.org should not be dialed at all in censored countries.

Steps to reproduce

  • Enable censorship circumvention
  • Use tcpdump or PCAPDroid or any capture software to log Signal
  • Search or grep signal

Actual result: These signal domain appeared:

  • updates2.signal.org
  • cdsi.signal.org
  • svr2.signal.org

Expected result: Nothing shoud appear.

svr2 appears when verifying PIN.

Note that cdsi and svr2 should be proxied as it appears in domain fronting configurations.

private const val F_CDSI_HOST = "cdsi-signal.global.ssl.fastly.net"

private const val F_SVR2_HOST = "svr2-signal.global.ssl.fastly.net"

Screenshots

Screenshot_20240912-032202

Device info

Device: Google Pixel 7
Android version: 14
Signal version: 7.16.3

Link to debug log

N/A

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant