how to defeat this practice?
Without considering the time/effort, what would it take to defeat this snooping? Presumably if the snooping system wasnt able to terminate/decode/etc the traffic, it would drop it, so only those intent on bypassing it would even know.
