What about the possibility of encrypted traffic that doesn't look encrypted? Perhaps "Liking" public Facebook status updates such that the first letter of each status liked, in chronological order, is the datastream.