How does VT prevent sniffing?
VT doesn’t prevent sniffing, VT runtime even has a tracing facility to easily display the traffic between the computer and the VT token! But VT ensures that communications cannot be “replayed” and that they convey as little information as possible about the token internal processing. For instance if a function is executed inside the token and the arguments for this function are already inside the token, it is very difficult for an attacker to even detect that this function is executed.