Encryption does not help if it uses X.509 certificates (SSL). They are broken because various issuing authorities that come in browsers by default are actually government authorities, and they issue certificates to tap SSL traffic like candy. There's even specialized DPI hardware that will decrypt the original traffic to your computer, read and inspect it, then re-encrypt using these phony certificates, while the user is none the wiser.
Moreover, they can easily block all encrypted traffic but allow it just for connections inbetween IPs they whitelist.
That's when it's time to go to side-channel or steganography.
