4 ms·
This implies that HTTPS would easily bypass it. If only the Guardian had HTTPS support...
by jychang 13y ago
This implies that HTTPS would easily bypass it.
If only the Guardian had HTTPS support...
- rahimnathwani 13y agoSadly it's not as simple as that. Facebook has HTTPS support, but TCP connections on port 443 just time out. The GFW is sophisticated. It would be trivial to stop all obvious VPN traffic (obvious = PPTP and L2TP/ipsec on default ports) without affecting other things, but this isn't done, unless many people connect to the same server over some period of time. Unidentifiable TCP/UDP traffic on other ports (e.g. OpenVPN on a port number in the 1000s) again isn't blocked. However, if the same TCP/UDP port on the same server is accessed for long enough, and often enough, it will get blocked. Switching to a different port on the same server will probably fix it, until the next time.