3 ms·
The author points out that netflix cannot see what is going on over the tunnel: Actually, if Comcast wanted to they could tell what you are doing by using deep
by eyeareque 13y ago
The author points out that netflix cannot see what is going on over the tunnel: Actually, if Comcast wanted to they could tell what you are doing by using deep packet inspection. Certain firewall vendors have found ways to figure out what you are doing over encrypted tunnels based on protocol pattern/finger printing.
- zwily 13y agoThey could probably guess he was watching streaming video. It'd be tough for deep packet inspection to tell that it's netflix though.
- GhotiFish 13y agohow could they guess he's streaming a video and not downloading a large file?
- adrianpike 13y agoTiming of packets going both ways. Netflix is a bad example since they use HTTP to wing packets, but with a UDP connection you won't see the regular ACKs heading back upstream.
- jlgaddis 13y agoIn this case, the VPN being used is a Juniper SSL VPN, which runs over 443/TCP. Comcast would see TCP ACKs being sent back to the VPN endpoint but they obviously can't see the encrypted data.