i need to use tor under tight DPI censorship situation. I need to be able to hide the fact i'm using Tor both from my gvt's DPI GFW and from my ISP. The only way for me to get Tor working is through the meek_azure bridge (as long as it lasts) or an obfs4 bridge. These supposedly wrap my SSL traffic in a http layer, right, allowing my to bypass the GFW.
Now: how good this really is for hiding me using Tor? 1. how can i be sure the entry node or bridge isn't malicious ? And if it is, what information can it get ? Just my ip address ? 2. what information my ISP or GFW can get when connecting by meek or obfs4. How can i be sure they really don't know this is hiding Tor traffic? 3. if i wanted to be sure, should i use a VPN before connecting to Tor? Are there obfuscating VPNs? 4. Is there a way to obfuscate my real ip from my ISP (by spoofing)?
What would be the best settings possible for my scenario ?