Oh yes, good point. I'll try when I'm back home, currently in a no-online-gambling state. As a tangent, I know there are googlers here, but I have always been

Oh yes, good point. I'll try when I'm back home, currently in a no-online-gambling state. As a tangent, I know there are googlers here, but I have always been curious to how low-level google and the rest of FAANG inspects connections. There is ton's of data being leaked about which device or library or application or network you are using to connect to a service via these low level protocols and encryption schemes. examplelib1.0 might reply to an ICMP before completing some other part of the state diagram while in 2.0 its reversed. Or maybe the 2.0 handshake takes 2x as long on average. Quirks they might be called elsewhere. Most people and developers aren't going to care or research or profile this, but I can only imagine with enough resources and risk on the line - this becomes important information to stopping spam or fraud and abuse.