What ISPs Can See
Clarifying the technical landscape of the broadband privacy debate
March 2016
Four Key Technical Clarifications
1. Truly pervasive encryption on the Internet is still a long way off.
2. Even with HTTPS, ISPs can still see the domains that their subscribers visit.
3. Encrypted Internet traffic itself can be surprisingly revealing.
4. VPNs are poorly adopted, and can provide incomplete protection.
https://www.upturn.org/reports/2016/what-isps-can-see/