Per subject: Is it (still) true that Tixati only encrypts the ‘headers’ of the data packets, not the contents or payload, when you enable Encrypted Only connections?
Quote: (Some clients) may encrypt data ‘header’ not full stream:
Each torrent client (Vuze, uTorrent, Tixati, etc.) chooses it’s own encryption implementation. And some only encrypt the ‘headers’ of the data packets, not the contents or payload. This makes it trivially easy to identify torrent traffic by inspecting the message payload. Some clients like uTorrent and Vuze do offer full stream encryption.
1. When connecting with an unencrypted SOCKS5 proxy this shouldn't be a real problem, right? My IP will be protected. So my anonymity is safe. Or will this allow ISPs to throttle / block my torrent traffic? Or will this open me up to a 'man in the middle' attack?
And should I enable at the very least Encryption Only connections? And loose out on speed? While ISPs supposedly still can detect my torrent traffic (
https://www.vpnuniversity.com/bittorrent/torrent-encryption)? And is this why a VPN connection is advised besides an unsecured SOCKS5 proxy?
So... To summarize...
1.) if your ISP doesn't throttle torrent traffic...
Unencrypted SOCKS5 proxy will hide your IP. If you trust there'll be no 'man in the middle' attack, this will be your fastest option with reasonable privacy (= a hidden IP address).
2.) if your ISP throttles torrent traffic...
*** use Tixati's connection encryption implementation: with a little luck your ISP will be blind to your torrent traffic, if not...
*** don't use Tixati's encryption implementation. Instead, use a VPN connection to fully hide your torrent traffic from your ISP.
The first option is less secure, but you should be safe enough. Your IP will be hidden by SOCKS5. Your network speeds should be reasonably fast.
The second option offers full security (the VPN will hide your IP, it will also encrypt your traffic), but will be slower and not all VPNs are created equal: especially UDP connections will be tricky.
That's why it's smart to combine the best of both worlds. Use an unencrypted connection using an unencrypted SOCKS5 proxy over a VPN connection that allows for torrent traffic (and UDP). Your torrent client will show your SOCKS5 IP address. And the VPN connection will encrypt any traffic going through it.