> I don’t get why headers and requests need to be spoofed if all traffic is over https?
https://en.wikipedia.org/wiki/Deep_packet_inspection
how are they looking inside the packet if it's encrypted?
how are they looking inside the packet if it's encrypted?