Metadata exposure is the leakage of non-content details about a connection, such as when it happened, how much data moved, what server was contacted, or which IP address and port were used. Unlike plaintext leakage, the message body may stay encrypted while these surrounding signals remain visible to network observers.
It matters because metadata can still reveal sensitive behavior. Attackers and intelligence tools can use timing, destination patterns, and traffic volume to infer which apps, services, or accounts a person is using. In real attacks, this information supports tracking, profiling, and traffic analysis even without breaking encryption. Defenses focus on reducing the amount and precision of observable metadata through encrypted DNS, privacy-preserving relays, traffic padding, and tighter mobile network controls that limit fallback and routing clues.