They just need to merge the Tor Browser into Firefox and add a meek-like http-based pluggable transport, then they can get around these weird MITM boxes.<p>They probably should have foreseen this and used OpenPGP-based updates over plain HTTP though.