[tor-talk] What is being detected to alert upon?

[Seth David Schoen]

Frederick Zierold writes:

> Hi,
> 
> I am very curious how a vendor is detecting Tor Project traffic.
> 
> My questions is what are they seeing to alert upon?  I have asked them,
> but I was told "that is in the special sauce."
> 
> Is the connection from the users computer to the bridge encrypted?
> 
> Thank you for your insight.

Are they detecting non-public bridge traffic, or only normal entry
guards?

Detection and obfuscation is kind of a big topic that's been around for
some years, so there are a lot of possibilities.

-- 
Seth Schoen  <schoen at eff.org>
Senior Staff Technologist                       https://www.eff.org/
Electronic Frontier Foundation                  https://www.eff.org/join
815 Eddy Street, San Francisco, CA  94109       +1 415 436 9333 x107