Some telecommunication companies in Europe and maybe in other parts of the world now want to charge their customers for the VOIP traffic (maybe some already are doing it), e.g. the use of Viber, Skype etc since it´s "free" to use in Android and IOS.
I guess they will use deep packet inspection to read the headers of the packets to figure out that it comes from services like Viber and Skype.
I want to discuss the security view about this and in what ways it is possible for a customer to bypass the packet inspection and what a telecommunication company can do to inspect the packets even if a customer tries to bypass the inspection.
This is what I know that will make a customer bypassing the inspection, and what a company can do to inspect the packets even if they are encrypted.
To bypass packet inspection:
- Use VPN
- Use a SSH tunnel
- The developers of Viber and Skype adds SSL support into their application
To inspect:
- Read packet headers to see from which application the packets are coming from
- Read the time interval and packet size
What else can a customer do get around the inspection and what else can a company do to inspect the packets?