Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I know that using SSL doesn't stop third parties from seeing what you're connecting to. Does it also not protect against third parties seeing what port you're connecting on?

share|improve this question
up vote 7 down vote accepted

Yes, they can.

To test this, I opened wireshark and browsed an SSL encrypted website.

Encapsulation is as follows:

  1. Frame
  2. Ethernet
  3. IP
  4. TCP
  5. SSL/TLS
  6. Application protocol such as HTTP or SMTP (which contains your data).

Another proof of concept would be this: If the port numbers were encrypted, a layer 3 device such as a NATing router would have no idea where to forward the traffic to.

share|improve this answer
    
So only things in layers five and six are encrypted? What exactly do each of the layers contain? – Blacklight Shining Aug 23 '12 at 21:34
2  
@BlacklightShining Explaining each of the layers is a bit beyond the scope of comments here, but you should look up the OSI Model for how data is ideally separated into layers, and the TCP/IP Model for how data is realistically separated into layers (because some of the distinctions in the OSI model are not worth the processing overhead, some layers are merged into a single layer in the TCP/IP model). – Darth Android Aug 23 '12 at 21:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .