Running SSH over 80/443--is it enough in practice?

I've never had an employer who ran a DPI firewall, thankfully. If I had, iodine (IP over DNS) might be a good option. I'm told that even gets through the captive portals on airplane wifi. Might not be pleasant for interactive SSH but would likely work.