Telegram Introduces WEB-Proxy Technology: Traffic Camouflaged as Regular Website Visits
Telegram has introduced an experimental WEB-proxy technology, unveiled on August 21, 2026, designed to bypass blocking by disguising messenger traffic as regular, encrypted website visits. This new method in Telegram Desktop routes MTProxy data through a WebView transport using HTTPS or WebSocket, making the data stream indistinguishable from legitimate web browsing and offering a new avenue for accessing the service under restrictions.
The core innovation is a multiplexed stream sent through the app's built-in browser engine. It maintains MTProxy's encryption but sends all data via a single WebView session. Special frame types (OPEN, DATA, WINDOW, CLOSE) package multiple Telegram connections into one secure channel that appears as a standard webpage load. A server-side relay receives this stream, separates it into individual connections for the MTProxy without decrypting content or knowing final destinations, preserving privacy.
The WEB-proxy operates on a regular HTTPS domain that simultaneously hosts a public website. The proxy bridge page activates only with a specific parameter derived from the configuration; all other requests receive the standard homepage, providing reliable cover. Connection links use formats like https://t.me/webproxy?server=... or tg://webproxy, with port 443 and HTTPS being mandatory.
Currently a proof-of-concept, the project includes a desktop implementation, an experimental Android client, and plans for iOS support. It represents a shift towards more sophisticated integration with legitimate web infrastructure, leveraging standard browser mechanisms to complicate traffic filtering. The practical value will depend on its resilience to adaptive traffic analysis and scalability. This approach structurally echoes earlier techniques like domain fronting, highlighting the cyclical nature of the struggle between censorship and circumvention technologies.
cryptonews.ru3 saat önce
