Keep in mind that my knowledge of Tor Bridges specifically is fairly limited (I basically only know that a bridge is an unpublished guard node that you can use to enter the Tor network without anybody realizing it at first, assuming your adversary is not using DPI. I know nothing of pluggable transports).
But take this scenario for example: We're behind the Great Firewall of China, which blocks access to all known Tor nodes. Th obvious fix to this is to go to https://bridges.torproject.org/bridges and grab some bridge lines. This presents me with two questions:
- Why can't the Great Firewall be modified to block access to the Tor Project's website? I understand that it uses SSL, thus cannot necessarily be directly blocked, but firewalls can be configured to spoof a DNS request and return an invalid IP address, can they not? This would block users from accessing the Bridge Database and they would not be able to access Tor without someone from outside the firewall sending them bridges in some other way.
- What is stopping them from blocking users from downloading the Tor Browser Bundle? This is essentially a duplicate of the question above, but I'd just like to know if I'm missing any facts...