how can they detect it is wireguard, I thought the traffic is encrypted? how doe... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		slt2021 80 days ago \| parent \| context \| favorite \| on: Ask HN: The government of my country blocked VPN a... how can they detect it is wireguard, I thought the traffic is encrypted? how does it differ from regular TLS 1.3 traffic?

dmantis 80 days ago [–]

It's UDP, not TCP (like TLS) and has a distinguishable handshake. Wireguard is not designed as a censorship prevention tool, it's purely a networking solution.

The tunnel itself is encrypted, but the tunnel creation and existence is not obfuscated.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact