3 ms·
It gets more difficult when you deal with aggregated traffic in the 10s or 100s of Gbps. But yes, it is possible. One thing is though - TLS1.3 is getting more
by nimrody 7y ago
It gets more difficult when you deal with aggregated traffic in the 10s or 100s of Gbps.
But yes, it is possible.
One thing is though - TLS1.3 is getting more popular and so is session resumption. So even now quite a bit of traffic cannot be identified and it will get harder and harder.
Encrypting DNS requests is one required piece of the puzzle.