Network 5-tuple identifiers (IP addresses, ports) dramatically inflate encrypted traffic classifier accuracy when not masked: retaining these identifiers raises ET-BERT's Macro-F1 on CSTNET from 60.04% to 85.23% and YaTC's from 74.42% to 92.92%, because many 5-tuples are application-exclusive and bypass the need to learn protocol semantics.

AlignTraffic, a cross-view contrastive self-supervised model, outperforms shallow classifiers by 5.97 to 30.70 Macro-F1 percentage points across four public encrypted-traffic classification tasks after fine-tuning, and achieves 94.54% accuracy and 51.26% Macro-F1 on an industrial dataset of 165 applications comprising ~4.2 million samples collected March 2025–March 2026, with geographic transfer to held-out regions (Beijing, Xi'an) showing 4.74 pp improvement over the industrial baseline without retraining.

§V.B, Tables IV–V, §V.E, Tables VII–VIII evaluation

Classification-relevant information in TLS traffic is concentrated in the first retained packet's visible protocol fields (TLS ServerHello and handshake metadata), not ciphertext. Shuffling only the first packet's payload reduces AlignTraffic accuracy on CSTNET from 90.35% to 61.14% — near the random-payload baseline of 60.63% — while shuffling only the subsequent four packets' payloads yields 89.04%, close to baseline.

§III.B, Table II detection

Packet-level classification without flow context is significantly harder for self-supervised models: on CSTNET packet-level evaluation, shallow learning achieves 63.73% Macro-F1 while AlignTraffic reaches only 24.97%, because individual encrypted-payload packets carry minimal application-identifying information once the initial handshake is excluded.

§VI.B, Table XI evaluation

Tor's nested encrypted relay encapsulation effectively defeats byte-level self-supervised classifiers: AlignTraffic achieves only 25.78% Macro-F1 on Tor-tunneled traffic (ISCX-Tor), compared to 83.92% on direct TLS traffic (ISCX-Direct), because Tor's encrypted cells conceal inner application protocol structure from an observer of the outer connection.

§VI.A, Table X evaluation

DNS over HTTPS traffic is always identifiable by ML classifiers based solely on IP addresses, regardless of encryption strength. Because DoH servers have fixed, well-known IP addresses distinct from data servers, classifiers achieve near-perfect accuracy on DoH without inspecting payload content.

2026-lenders-secrets-best-not §6.2 (header field analysis) / Abstract ml-classifierip-blockingtraffic-shape

In DNS over HTTPS deployments evaluated across all constrained IoT scenarios, classifiers achieve near-perfect accuracy identifying DNS frames based on IP address features alone — TLS encryption does not prevent DNS traffic identification when the DNS server IP is distinct from data server IPs. DoH provides weaker DNS traffic obfuscation than well-configured DoC in IoT deployments.

2026-lenders-secrets-best-not Abstract / §6 ml-classifierip-blocking

Amnesty International's 102-page investigation identifies a multi-vendor surveillance stack deployed in Pakistan: Chinese DPI (Geedge/MESA-derived), Canadian social-media monitoring (Netsweeper), and Emirati commercial spyware (Pegasus and FinFisher). The system enables deep packet inspection, SNI-based filtering, and traffic-shape classification at national scale, including targeted interception of encrypted messaging apps and VPN traffic.

2025-amnesty-pakistan-shadows §3, §5 dpisni-blockingip-blockingtraffic-shapeml-classifier

InterSecLab's 76-page analysis of the Geedge/MESA leak (based on nine months of indexing and translating >100,000 documents) characterizes the Tiangou Secure Gateway (TSG) product line as a commercially deployable detection stack that combines deep packet inspection, real-time mobile subscriber monitoring, active probing, ML-based traffic classifiers, and granular per-region rule sets. TSG is not a research prototype — leaked documentation includes deployment timelines and client government interactions for Kazakhstan, Ethiopia, Pakistan, Myanmar, and one unnamed country, with censorship rules explicitly tailored to each region.

2025-interseclab-internet-coup §3–§5 (InterSecLab report) dpiactive-probingml-classifiersni-blockingip-blockingtraffic-shapefully-encrypted-detect

Justice for Myanmar documents that Geedge Networks supplied Myanmar's military junta with GFW-derived surveillance and censorship infrastructure under Belt and Road frameworks following the February 2021 coup. The deployed system (Tiangou Secure Gateway / TSG) incorporates the same DPI, active-probing, and ML-classifier capabilities as the domestic Chinese GFW, giving Myanmar one of the most technically capable censorship systems in Southeast Asia.

2025-jfm-silk-road-surveillance §3, §5 dpisni-blockingip-blockingtraffic-shapeml-classifieractive-probing

The paper enumerates five adversarial attack surfaces against a video-steganography UP channel: (1) wholesale blocking of the hosting platform, (2) mass-scanning and blocking encoded videos (noted as generally cost-prohibitive per the steganography literature), (3) enumerating videos via pseudorandom tags (feasible but hampered by tag-list overlap with unrelated content and time-window dynamics), (4) banning accounts posting encoded videos, and (5) tracking anticensorship users viewing encoded content. The pseudorandom tag window design specifically prevents preemptive enumeration because the top-n results for a tag at epoch t differ from those at t±1.

2025-vines-extended §2.1 ip-blockingml-classifier