[tor-dev] A layered transport

Da Feng sunspiderx at gmail.com
Mon Oct 26 07:44:59 UTC 2015

   I've discovered that the GFW normally doesn't block https
protocols. We can use a https front tier to distribute connections to
actual bridges. The front tier encrypts an internal address identifier
with its private key (no matching public key or public algorithm) and
returns to user the encrypted identifier, part of which also includes
the user's chosen password. Then when submitting requests, the user
encrypt again with his password the items such as his timestamp,
broswer headers. The request line to https server is no different from
an ordinary one and include both the user encrypted item and front
tier encrypted item. After the connection is established, data is
relayed inside https between bridge and user.

More information about the tor-dev mailing list