HTTPS is not enough: boffins fingerprint user environments without cracking crypto

Comms patterns ID OS, browser and application

Encryption might hide important content from prying eyes, but a group of Israeli researchers has found that HTTPS traffic alone can fingerprint a user's operating system, browser, and application."