privacy / security
What your ISP can see, and what it cannot. A plain description of the metadata that leaks even when the contents do not.
R
By Reza Karimi
Security researcher
1 min read

Encryption hides what you said. It does not hide that you spoke, for how long, or to roughly whom.
The contents
For any site served over HTTPS, the page you read and the words you type are not visible to the network in between.
The shape of the traffic
Timing, volume and the addresses you connect to remain visible, and together they say more than people expect.
What actually helps
Reducing how identifiable that shape is matters more than adding another layer of encryption on top of the contents.