4 ms·

Could they ever possibly break an SSH tunnel over port 80/443?

• teraflop 12y ago
  It's implausible that they could decrypt it, but they could certainly block it.
• tiatia 12y ago
  Sometimes. It depends on the day, time, location. Many things. A website may be blocked today but not tomorrow. Even gmail (web interface) worked on SOME days. It may be blocked in Shanghai but not in Beijing and vice versa. Port 443? Good chance if you have you own IP address that it works most of the time so so. But I have a 50% packet loss. Facebook and google (?) rarely worked over ssh.
• revelation 12y ago
  I think that theres evidence they are already doing packet inspection and active interrogation for anything they deem suspicious. So if your SSH tunnel has some recognizable traffic characteristics, it's game over. There is an option to configure OpenVPN with a fixed key that it uses to encrypt all and any traffic, leaving only random data. That's very desirable right now since there are no easy ways to detect it, but in the future I guess they'll just outright block any traffic that is just too random. Real plaintext traffic, certainly with verbose 1980 protocols like HTTP, trivially fails many randomness tests.