Set up the proxy server to examine the HTTP host header of each incoming request. This step is crucial to prevent domain-fronting attacks. The proxy server should compare the host header with the actual destination HTTPS server for each request. If they do not match, the request should be blocked or rerouted to prevent domain fronting. https://www.extnoc.com/learn/s....ecurity/how-to-stop-