[cperciva]

I'm just pointing out that the privacy justification is nonsense. Protecting the integrity of connections? That's important. Preventing web browsers from throwing a fit about "insecure connections"? That's also important. But privacy isn't the issue here, and I've talked to enough people at Netflix to know that they know that too.

[bobthebuilders]

Most people can download a program that sniffs HTTP. Using side channels is not a simple affair.