[arbol]

> The site’s content happens to include an HTTP/2 endpoint that, when presented with an anonymous authorization token, behaves as a VPN server’s outer layer

Is this not the fingerprintable aspect? Wouldn't you need to randomise the HTTP endpoint to avoid eventually being banned based on URI?

Cool idea btw.

[willy_k]

For a URI ban would that have to be through ISPs? If so, then alternative DNS would be an easy work around.