21Ağu
DomainFronting – re-routing and SSL certificats
I'm looking for a specific answer regarding the TLS handshake in a scenario of domain-fronting. Following hensonsecurity and zscaler blogs I have noticed that a detailed description regarding the re-direct / routing scheme is missing when the CDN finishes the legitimate TLS hand-shake and it sees that the GET is to another domain that hosted in it. If there is a redirect command, is there a new ssl hand-shake with the domain itself (if it has imported its own private cert?)
