[est]

> The key enhancement of these successor protocols is that they require the client, in its initial mes- sage, to prove knowledge of a server-specific secret (trans- mitted out of band)

This is great idea, we can make a half-duplex bridge, users inside the GFW need access to at least two ISPs. One ISP for uplink, one ISP for downlink, since GFW can only observe traffic on the national border, not between internal domestic ISPs, it can not establish full state of the connection.

We call it triangular networking instead of statefull peer-connected network.