Hello, everyone
Just posting a quick update on recent progress
・Certificate issues
One current challenge is certificate-related problems. The proposed solutions are either certificate pinning or using WebPKI. For now,
I have adopted the proposal to pinning the certificate.
The reason is that WebPKI imposes very high costs on Bridge operators (certificate issuance, domain acquisition, etc.).
However, WebPKI is undoubtedly better for censorship resistance, so I’d like to hear everyone’s thoughts on this point.
Also, after posting here, I found this:
I also learned the creator is a Tor core developer.
This implementation is labeled experimental, but it’s from 9 years ago, and QUIC-PT isn’t bundled in Tor Browser yet.
Why wasn’t his implementation bundled in Tor Browser?
I emailed him, but Tor core developers apparently take weekends off, so I haven’t gotten a reply yet. (He’s probably busy too.)