The 110ms itself isn’t the tell — it’s the consistency. Normal remote workers have variable keystroke timing: thinking pauses, typing speed changes, distractions. A session routed through a fixed geographic relay (VPN or RDP hop) produces characteristically stable, low-variance inter-keystroke intervals at the network layer.
110ms with near-zero variance looks very different from 110ms with normal human jitter. That’s what behavioral analytics actually flags. The absolute number is almost irrelevant — it’s the pattern.
With the state of America’s internet, surely 110ms isn’t suspicious.
The 110ms itself isn’t the tell — it’s the consistency. Normal remote workers have variable keystroke timing: thinking pauses, typing speed changes, distractions. A session routed through a fixed geographic relay (VPN or RDP hop) produces characteristically stable, low-variance inter-keystroke intervals at the network layer.
110ms with near-zero variance looks very different from 110ms with normal human jitter. That’s what behavioral analytics actually flags. The absolute number is almost irrelevant — it’s the pattern.