geedge-jira/md/OSS-321.md

# Signal开启审查规避功能策略CT

| ID | Creation Date | Assignee | Status |
|----|----------------|----------|--------|
| OSS-321 | 2024-07-16T17:07:38.000+0800 | 蒋慧慧 | 完成 |


---

客户现场signal APP正常情况下系统策略可以deny掉，打开审查规避功能，就绕过deny策略了，可以正常通信。**jianghuihui** commented on *2024-07-16T18:36:04.953+0800*:

配置系统里Application为SignalPrivateMessenger的Deny策略， 打开审查规避之后，发现应用可以发送消息和发送文件，不能发起语音和视频通话。捕包发现应用与google 建立了TLS 协议，初步判断该应用使用了Google 代理或Google CDN或Google其他服务。

建立连接的SNI有：

clients3.google.com
clients4.google.com
inbox.google.com
android.clients.google.com



---



# Attachments

Attachment: 2024.07.16_10.36.51.jpg

![2024.07.16_10.36.51.jpg](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/60149/2024.07.16_10.36.51.jpg)



Attachment: 3e24dff0418586f1e1576b28c3435c98.jpg

![3e24dff0418586f1e1576b28c3435c98.jpg](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/60148/3e24dff0418586f1e1576b28c3435c98.jpg)



Attachment: 4bbfe151c3cb0e6c41c8b463a40eb1ea.jpg

![4bbfe151c3cb0e6c41c8b463a40eb1ea.jpg](https://gfwleak.exec.li/admin/geedge-jira/raw/branch/master/attachment/60150/4bbfe151c3cb0e6c41c8b463a40eb1ea.jpg)