The article also notes
> Despite no web browser implementing unencrypted HTTP/2, we detect that up to 6.28% of websites support unencrypted HTTP/2 traffic.
My own experience with trying to use unencrypted http/2 between two docker containers was that it was easier to use a self-signed certificate than to get my libraries to use unencrypted http/2. If I was in charge of the Chinese firewall this would be pretty far down on my list of holes to close up
I imagine a forward proxy that attempts to connect to a remote host via unencrypted HTTP/2 would make it trivial to access 6.28% of websites, regardless of whether web browsers support it?
No idea whether this is going to be a priority for censoring states to prevent though... wasn't there already talk that China is poised to lift the great firewall anyway?
>wasn't there already talk that China is poised to lift the great firewall anyway?
considering what happened in Hong Kong, I can't imagine the lifted firewall decision would last very long at all. But for that window, it would be the best of both worlds, with the rest of us enjoying eternal jiǔyuè (九月)
It's clear you never lived in an authoritarian country. It's not how it works.
There are teams who's job is to serve their leaders. And leaders make their demands (like close up the dissent, stop "misinformation" spread etc). So teams are very incentivized to live up to their demands, show increasing number of "work" done (e.g. # jailed, # websites closed etc). And they get pretty good salary and are constantly hungry for work and to show their loyalty. They are typically way more people than needed for that job, and their qualifications are pretty low on average, but government spend incredible resources on them, so there are some bright minds as well.
After this article they will be obliged to close the hole at the very least to prevent snitching by a competitive team. If lucky, present it as a win to higher command, before the other team does.
I remember in one authoritarian country they made a coordinated effort of Bureau of Investigations + Traffic Police + Field Police just to capture one rogue teenager who drew a graffiti supporting opposition leader somewhere in second-rate town like half a year ago. I wrongly assumed all those involved have better things to do than to waste their time on graffiti, but they really did it.