1) The only TLS connections that are let through are all MITM&#x27;d.<p>2) Every other TCP&#x2F;UDP flow is checked for conformance with plain-text protocols (like HTTP), or far worse, simply for the level of entropy in the data.<p>3) A threat of legal action is made against anyone caught using secure crypto.<p>Good luck beating that. The key here is that the &quot;entropy detector&quot; doesn&#x27;t &quot;really&quot; need to work. It only needs to work well enough to scare people into submission.