3 ms·
There are a lot of information in requests metadata. For example, even without accessing any encrypted data you can identify: 1. Client (user IP). 2. Service
by deepsun 8y ago
There are a lot of information in requests metadata.
For example, even without accessing any encrypted data you can identify:
1. Client (user IP).
2. Service (server IP).
3. Amount of traffic.
4. Direction of traffic.
4. Just watching timestamps, you can identify patterns that will give you information on what type of content user is accessing (e.g. if you are oppression nation state, and want to know who watched or reshared a certain video on youtube, you can get that purely from requests patterns, mainly timestamps). By correlating those timestamps with others, you can identify user's friends/collaborators, or other identities they use.