http://ciisqbg45nggykdl6rjdrq3wc64csga4vkphu66qsi65mypeitqedoad.onion/blog/https-tunnels
Also, this feature uses the same hosts/IPs as the VPN, so those of you doing your own custom IP-based kill switch won't have to change anything. (yes, the above was copied from the SSH tunneling article, but it also applies to this HTTPS tunneling) Another feature included in this HTTPS tunneling setup is that you can specify any SNI host/domain.