Bypassing Censorship: The Unexpected Use of Unencrypted HTTP/2

2025-04-14

Researchers discovered that unencrypted HTTP/2 can bypass censorship in China and Iran. Despite the lack of browser support for unencrypted HTTP/2, they found that up to 6.28% of websites support it. They developed a tool to evaluate website support for unencrypted HTTP and suggest this finding adds to existing censorship circumvention techniques. Importantly, unencrypted HTTP/2 is not secure and should not be used for sensitive data.