[cookiengineer]

But does the paper imply that something like chunked encoding smuggled HTTP requests with an encrypted payload after the second chunk would work?

That is, assuming entry nodes are available as e.g. nginx proxies inside the Chinese ASNs and are allowed to operate serving websites to ASNs from foreign countries.

I'm mentioning nginx because there were some related bypass vulnerabilities in the past, and one could argue that they just missed updating them.

[blablablub]

tried that...done that... blocked The last rule of the GFW is: If you don't know what this traffic is or it looks suspicious, block it.