Why would a whitelist include an HTTP server that does proxying or port-forwarding?
Sure.
At some point, there will be a proxy put up on some machine because there will be a demand for it. A little crypto on the payload and no one has a freakin’ clue what is going down the wire.
Let’s put it this way: You’re trying to out-thug the ChiCom’s, who have erected some of the most stringent net filtering.
They can’t make it work, and they have a lot more experience being totalitarians than the US Congress.