GLOSSARY
What is traffic encryption?
Short answer
Traffic encryption is the transformation of data into an unreadable form on the path between two points. In a protected connection the tunnel is encrypted between your device and the service's server: on that segment the contents cannot be read. Vinipuch uses TLS 1.3 via the Reality transport — a modern encryption standard.
Published: 2026-08-25 · Updated: 2026-09-21
Imagine a letter in an opaque envelope: intermediate nodes can see the envelope travelling from you to the server, but not what is inside. An encrypted tunnel works the same way: encryption covers the device-to-server segment.
Beyond the server, traffic travels to the destination site under that site's own rules — usually HTTPS, which is an encrypted channel too. The end-to-end picture is therefore two independent encrypted segments.
Keep the boundary in mind: encryption protects the contents of transmission, but it does not hide the fact of a connection and does not replace care with accounts and cookies on websites.
In Vinipuch, encryption to the server is TLS 1.3 via Reality. Beyond that the site uses its own rules, usually HTTPS. The two segments are independent.
The traffic counter is bytes for the quota period, not site names. We do not keep browsing history. The full list is in the logging policy.
Encryption does not replace the terms and does not promise a cash refund. The client is official sing-box: SFI, SFA, SFW, SFM, SFL.