SignalAug 9, 2024

We're aware of reports that access to Signal has been blocked in some countries. As a reminder, Signal's built-in censorship circumvention feature might be able to help if your connection is affected:

Signal Settings > Privacy > Advanced > Censorship circumvention (on)

Show threadSignalAug 9, 2024
We have already started working on more advanced censorship circumvention techniques, but in order for these efforts to be most effective we need the big companies who are dragging their feet on moving away from plaintext SNI headers to start taking this problem more seriously.
Show threadSignalAug 9, 2024
Solutions like Encrypted Client Hello (ECH) remove the plaintext server name from the TLS handshake, which makes it far more difficult for hostile ISPs to block access to the sites and services you care about — but this isn’t widely supported yet. We hope that starts to change.
Show threadJeffrey Goldberg
@signalapp , I am not familiar with ECH, and am eager to learn how it words with CDN and lad balancers. .
Aug 9, 2024 at 10:30pmWeb
Show threadrsalzAug 9, 2024
@jpgoldberg @signalapp It works fine, it was designed to. See for example https://www.ietf.org/archive/id/draft-ietf-tls-wkech-05.html
A well-known URI for publishing ECHConfigList values.

We define a well-known URI at which an HTTP origin can inform an authoritative DNS server, or other interested parties, about its Service Bindings. The data can include Encrypted ClientHello (ECH) configurations, allowing the origin, in collaboration with DNS infrastructure elements, to publish and rotate its own ECH keys.