Tor website says that an ISP may perform Deep Packet Inspection (DPI) and figure out that I am using Tor.
References:
- https://www.torproject.org/docs/bridges.html.en
- https://www.torproject.org/projects/obfsproxy.html.en
As per my knowledge, a Tor generated data packet leaving my computer only has the destination IP and destination port which can be read by any third party. How can any kind of inspection at all understand that I am using Tor?
I understand that it is possible an ISP will figure out that I am using Tor if they have my Entry Nodes or Bridges IP address stored to be a Tor enter point. But I am fine with it. Totally. But what worries me is how can a deep packet inspection produce results I am using Tor?
If the packet leaving my computer is encrypted, then it should not be vulnerable to any type of inspection according to my vision. So this simply confuses me.