Snowflake
Snowflake uses domain fronting[1] for rendezvous. It is the digital equivalent of a spy having their secret meetings inside an unsuspecting friends house, and it always eventually it goes bad for that friend.<p>The technique is heavily used by bad actors and is being blocked by default[2] by some cloud providers. AWS went as far as sending a nastygram to Signal[3] when they tried to roll it out on a wide basis for fear that countries like Iran and China would just block all of AWS.<p>1. <a href="https://en.wikipedia.org/wiki/Domain_fronting" rel="nofollow noreferrer">https://en.wikipedia.org/wiki/Domain_fronting</a>
2. <a href="https://azure.microsoft.com/en-us/updates/generally-available-block-domain-fronting-behavior-on-newly-created-customer-resources/" rel="nofollow noreferrer">https://azure.microsoft.com/en-us/updates/generally-availabl...</a>
3. <a href="https://signal.org/blog/looking-back-on-the-front/" rel="nofollow noreferrer">https://signal.org/blog/looking-back-on-the-front/</a>