Re: Or, simply...
"protocols even a MITMing firewall may not be able to detect without constant updates and analysis."
This can be overcome by using deep packet inspection. I haven't gone that far, but if people start engaging in this sort of activity, I'll have to decide between setting up a DPI system or ceasing to use the web entirely.