[tgragnato]

Gists and other subdomains are still blocked, but the APEX is available.

This is one of those cases where ECH would really make sense: the censor is forced to choose whether to pass TLS connections to an IP or not.