有一名开发者为突破GFW提供了一种新的思路，在 tcp 连接建立后，发起一个 tls 握手时，服务器端类似于端口流量转发到某白名单域名，以伪装成白名单域名的 tls 流量，当 tls 握手完成了，此时TCP连接保持传输真实的 TCP payload，该开发者已经发布了一个工具 ShadowTLS
—— ihciah@V2EX ，ThirdFlame
BY yuefeng的碎碎念
A project of our size needs at least a few hundred million dollars per year to keep going,” Mr. Durov wrote in his public channel on Telegram late last year. “While doing that, we will remain independent and stay true to our values, redefining how a tech company should operate.
Telegram’s stand out feature is its encryption scheme that keeps messages and media secure in transit. The scheme is known as MTProto and is based on 256-bit AES encryption, RSA encryption, and Diffie-Hellman key exchange. The result of this complicated and technical-sounding jargon? A messaging service that claims to keep your data safe.Why do we say claims? When dealing with security, you always want to leave room for scrutiny, and a few cryptography experts have criticized the system. Overall, any level of encryption is better than none, but a level of discretion should always be observed with any online connected system, even Telegram.
yuefeng的碎碎念 from us