Learning path · 19 steps
Behind the Firewall
Censorship is an arms race. This path explains how blocking works, which disguises defeat which blocks, and what to prepare for the day the network goes dark entirely.
Who it is for People in countries that block websites, fingerprint VPNs or switch the internet off.
-
01
Getting Around Internet Censorship
Match the circumvention tool to the blocking technique you face.
-
02
OONI
Read existing measurements and understand the risks before collecting your own.
-
03
Pluggable transports and bridges
Compare Tor entry routes and learn how to obtain and use bridges.
-
04
Psiphon
Assess a managed circumvention service and its operator trust model.
-
05
Outline
Understand private server access keys and who operates the proxy.
-
06
WireGuard
Learn what an encrypted tunnel protects and why it can still be blocked.
-
07
Run a private circumvention server for people you know
Set up and test a route for people you know, with a recovery plan.
-
08
Using Tor Safely
Tor with bridges gives you access and anonymity at once.
-
09
Tor
How Tor, its bridges and pluggable transports work underneath.
-
10
Internet Shutdown Preparedness
What to install and agree on before the network is switched off.
-
11
Kiwix
Prepare a reference library that can be read without an internet connection.
-
12
Briar
A messenger that keeps working over Bluetooth and Wi-Fi when the internet does not.
-
13
Building a Local Mesh Network
Cheap LoRa radios give a group a text network with no infrastructure.
-
14
Off-Grid Messaging
The wider landscape of offline and delay-tolerant messaging.
-
15
Map: Censorship Resistance
How naming, storage, transport and messaging combine into censorship resistance.
-
16
DNSCrypt and dnscrypt-proxy
Separate encrypted DNS from relay-based DNS privacy.
-
17
Mullvad VPN
Assess a managed VPN through its account, payment and operator dependencies.
-
18
Delay-tolerant networking
Plan delivery across interrupted connections and limited storage.
-
19
Satellite broadband and direct-to-cell
Check terminal, account and authorized-location dependencies before choosing satellite backhaul.