Hacker News Reader

TCP MSS < 1500 bytes can be a tell, although it will sometimes falsely identify non-"VPN" tunnels.

There are sooo many people out there who are clamped to something far lower than 1500. MTUs below 1280 are not that exotic either.

On the other hand, using Masque for TCP transfers will probably fool a server to believe the MSS is 1500.