Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I know that using SSL doesn't stop third parties from seeing what you're connecting to. Does it also not protect against third parties seeing what port you're connecting on?

share|improve this question

1 Answer 1

up vote 7 down vote accepted

Yes, they can.

To test this, I opened wireshark and browsed an SSL encrypted website.

Encapsulation is as follows:

  1. Frame
  2. Ethernet
  3. IP
  4. TCP
  5. SSL/TLS
  6. Application protocol such as HTTP or SMTP (which contains your data).

Another proof of concept would be this: If the port numbers were encrypted, a layer 3 device such as a NATing router would have no idea where to forward the traffic to.

share|improve this answer
    
So only things in layers five and six are encrypted? What exactly do each of the layers contain? –  Blacklight Shining Aug 23 '12 at 21:34
1  
@BlacklightShining Explaining each of the layers is a bit beyond the scope of comments here, but you should look up the OSI Model for how data is ideally separated into layers, and the TCP/IP Model for how data is realistically separated into layers (because some of the distinctions in the OSI model are not worth the processing overhead, some layers are merged into a single layer in the TCP/IP model). –  Darth Android Aug 23 '12 at 21:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.