More context to why using apps, not websites or email:<p>Smart Voting website is hosted on Google App Engine (appspot.com). The Russian government had no ability to block it for long time without affecting other Google services, since ISPs could block mostly by IP and via DNS spoofing.<p>To block reliably by domain they would need to have DPI (deep packet inspection) hardware, and most ISPs had no DPI, since it's expensive. Even if they had it, they could only block by domain/ip, not by traffic signatures and reaction time was relatively slow.<p>Now they improved censorship infrastructure and basically building Great Firewall. As I understand government controlled DPIs are now installed on Internet exchange points. So it's easier to block specific domains and protocols. Recently they:<p>- were throttling Twitter (and every website with t.co substring, yeah)<p>- blocked some opposition websites hosted on Appspot<p>- DNS over HTTPS (DoH) servers used in the app (Google, Cloudflare, OpenDNS)<p>- Bunny CDN, used in the app<p>- docs.google.com, telegra.ph (voting list was published there)<p>- DHT and BitTorrent<p>- started blocking some VPN providers and attempted to block Wireguard protocol<p>I think some of blocks (e.g. torrent) were used to test capability. Now that they can slow down websites and block more accurately, they have more leverage over tech companies.<p>Apps have more ways to avoid blocking than websites and PWAs. E.g. by getting endpoints/data via updates, notifications, domain fronting. So the obvious next step was to attack app stores.<p>---<p>You could enter your email on the website, but some of the emails got leaked. Considering many people used personal email addresses, it was possible to combine it with other leaks/DBs to get more personal information. Police visited some people registered on the website. So I guess people trust less giving their email addresses now.