@sb @torproject also snowflake works behind NAT, there is no need for opening a port.

@sb @torproject found something
"Proxies poll the broker periodically, using ordinary HTTPS requests."
https://www.bamsoftware.com/papers/snowflake/

@sb @torproject I'm not sure exactly how, but maybe because snowflake proxies are used as entry nodes, broker discovers them the same way that TOR entry nodes are discovered (which I also don't know how)

maybe tomorrow I'll start reading on it a bit

@sb @torproject we have to connect to a broker, which gives us an IP address of an active proxy. The broker itself is domain fronted behind another big website (like bunny.net, cdn77, these two currently work on MCI, in my region at least)