In this exact scenario, just use ports other than :443

But GFW certainly had the capability to block all ports. So no one really knew.