Update: the main captive-portal censoring Wi-Fi that I use – Israel Railways – has stopped allowing SSH access through their network (could their admins be reading my blog?).

The workaround I use now, is to set up SSH through an Apache proxy running on my web server using TLS (because you can’t directly proxy through the plain HTTP transparent proxy run by the railways free Wi-Fi – if only life could be that easy). This is mostly based on the article here: http://mark.koli.ch/configuring-apache-to-support-ssh-through-an-http-web-proxy-with-proxytunnel , but I’ve had to change a few things and jump through a few additional hoops so I’ve documented the process in my own article here: http://geek.co.il/2017/04/18/ssh-over-https-for-fame-profit