One thing I learned from this episode is that the GFW does not yet have the ability to automatically filter HTTPS traffic based on certificate signatures. Someo

One thing I learned from this episode is that the GFW does not yet have the ability to automatically filter HTTPS traffic based on certificate signatures. Someone have suggested before and now we have some evidence that this is not the case. P.S. Google is a prime candidate for this kind of filtering since they reuse one huge certificate containing almost every domain they use, despite maintaining an intermediate CA at the same time.