Fuck i love test cricket , this is gripping <| sep |> You obviously haven ' t visited a Wetherspoons recently . <| sep |> So , as part of your completely hypothetical , impossible to manage nevergoingtohappen law , the government are going to request an explanation for every sustained encrypted data stream ? Amount of data to an endpoint would be an obvious one . If you pass all traffic over VPN there will be no other connections which would be a flagStreaming anything encrypted would cause this kind of traffic . Netflix is far more prevalent than VPN use , but would display as such a connection . Unless the tunnel is applied at the router , other devices on the home network will cause unencrypted noise . Yes , which is exactly why the law allows for you to be asked to hand over your keys already . How is anyone outside of us IT geeks even going to know what you mean by that ? Is grandma streaming Eastenders from iPlayer on her new smart TV going to know what the scary EXPLAIN YOUR ENCRYPTION HAND OVER YOUR KEYS letter means ? Dynamic IP is irrelevant an ISP knows who was assigned which IP when . Mobile same thing . Businesses what ? Cloud what ? Granted . The ISP , if they retain these logs , will know this . Even mobile internet providers with users roaming between stations may log the IMEI . But the verbosity of these logs , when combined with your SSL traffic flags will be astonishing . Every device will get multiple flags a day . Business connections will have continuous sustained encrypted connections . Enterprise connections into datacenters and the cloud are almost exclusively a form of VPN . Cloud endpoints are often dynamic . I ' m talking AWS and Azure type offerings here . Global enterprise cloud offerings will not relinquish logs or keys to this silly little country with its daft antiVPN law . True for SHTTP , not true for VPN service or PGPBut an overwhelming % of your SSL flags are going to be false positives . Not understanding or being aware of the law is no defence . True , but the administration in charge of applying your well thought out law is going to be very busy explaining this to all the guilty confused people . The origin and endpoint of the packets is identifiable which is all that is necessary for the point I was making , again it was about the method of notification . That ' s the crux of my point . In Pokies Terrible Britain everyone will receive a new government notification every day , and no one will know what it means . Everyone becomes a criminal because encryption is so prevalent . Your law is as silly as the government trying to ban encryption . The practicalities of applying such a law are mindboggling . So mindboggling I ' m pretty happy to stand by my assertion that its impossible .