Re: Domestic? @Soruk
I see suggestions that only whitelisted traffic could be allowed, subverting attempts for encryption.
The suggestions for OTPs are valid, steganography is possible. But I'd like to take this back to basics, in the event that only http was allowed, and traffic analysis etc was put in place with DPI, if you're allowed to say 2 things, you can say anything you like:
HTTP Hello = 0
HTTP GET = 1
That there is all the ingredients you need for any protocol. Go nuts and implement SSL encoded on top of that and just send lots and lots of requests, you can even 'GET' different URLs to mix it up, sure it's slow, but it's possible.
(Yes, an extreme and silly example, but the point is - idiots don't understand what communication means, it's all about interpretation.)
Biting the hand that feeds IT
