what you say true but only under full investigation with the internet provider working with the investigators .
the router header info is encrypted hashed 128 , so it won't show or be decoded ....
When you send a web request, it gets sent as a series of packets. These packets have layers (physical, data link, network, transport, session, and presentation/application)
Encryption happens on the application layer, the headers I'm referring to are at the data link layer and transport layers.
The data link layer will contain the MAC address.
The transport layer contains:
- The local ip address sending the packet (source)
- A local port to use for the request
- The remote ip address where the packet is going (destination)
- The remote port to connect to and send the request
When a router assigns an IP address, it has to assign it to something. Device hostnames can change without notice, but a mac address is always the same. This is the only way a router can reliably know which machine is sending a packet, and where to send the response when it is received. This pattern is repeated at every hop the packet makes on its way to the destination, and back.
These headers are sent as buffers, the numbers are sent as bytes in a standardized length, no encoding, encryption, or hashing occurs here.
all your info can be packet sniffed via your ip and normal downloads and emails can be decrypted, not https info.
I assume you're referring to PRISM? The NSA still needed companies to play ball with them in order to read your information in some cases, in others man in the middle attacks were also possible.
If a website had the right SSL configuration, your data could be protected.
However, if the SSL config allowed something like RC4 encryption (now universally obsoleted) decryption was possible, downgrade attacks could force RC4 to be used if the HTTPS server had it enabled at all.
Or.. If you or the web server used certain CPU's, decryption would be possible because the cpu clock and pseudo-random number generators were compromised. This is because all encryption relies on key pairs (private key/public key) to encrypt and decrypt a message. The key pair is generated from random numbers, and random numbers are generated by giving the random number generator a seed value, and that seed value is almost always the long number version of the unix timestamp (milliseconds since 12:00 am, January 1st, 1970)
If the CPU's internal clock is compromised, then the pseudo-random number generator will provide predictable results, which means knowing the timeframe a message was encrypted greatly reduces the number of key pairs to try in order to successfully decrypt the message.
If none of these vulnerabilities are present, encryption was/still is impossible.
History lesson time
During the cold war the most secure method at the time was a thing called the one-time key pad. It was a pad full of numbers organized in rows and columns, sometimes very small, or even in microfilm. Usually they had page numbers as well.
When a message needed to be sent, the sender would pick a random page and use that key to encrypt their message. Once the message was written, the key page was tore out from the pad and destroyed.
When the message reached the received, another party would use some tactical means to let them know which page to use from their one time pad. They would decrypt the message and also destroy the same page from their pad.
As long as the keys were sufficiently random and contained more numbers than the message, the message was impossible to decode without the key.
This is how advanced encryption works at its core. The longer the key (128-bit, 256-bit, etc..) the more secure because it is less likely that the key will need to be repeated to encode the whole message.
A shorter key is not only easier to guess, but also makes it possible to use other decryption techniques (letter frequency analysis, etc)
Today
Unless hardware or software is compromised in some way, encrypted messages are safe until quantum computing comes along. Even then, quantum encryption will provide full-proof protection from snooping.