Install a VPN or not

I use a VPN occasionally, but mainly to access some European sites that I couldn't otherwise get from the US. Tried free Proton, but found it too limiting. Surfshark had a great deal at the time, so I went with them.

neemobeer said:

You can get the same level of privacy without a VPN by simply configuring DoH (DNS over HTTPS) and add some actual security by setting your home network and system-level DNS to use Cloudflare DNS which does some domain blacklisting of malicious domains. This will impact network performance less and you won't be handing over any data to a VPN provider.

Click to expand...

For those that don't know, do you have instructions on how to do all this?

neemobeer said:

Browser provide plenty of protection against MiTM attacks. Be aware that neither DoH nor a VPN will offer much privacy against site level tracking techniques including device profiling and tracking pixels. Plus lots of sites send data to places like Meta that are used to advertise to you.

Click to expand...

That's where tracking protection and extensions like uBlock Origin come in. On some websites that I think need the help, I disable those. But most of the time, I leave them on.

Are they 100% privacy fool-proof? No, but nothing out there is....

DoH is mostly just a toggle in your network settings, can be set on Windows, per browser or if your router supports it at the network level.

Browser tracking protections do help but don't stop all tracking methods.

I use the WireGuard setting with Private Internet Access, I really have no idea how it works, or if it helps with any security, but this is what it says it supposed to do.


(PIA) can significantly enhance your online security. WireGuard is a modern VPN protocol known for its speed and security, while PIA is a VPN provider offering various security features.

Here's how they contribute to security:
WireGuard's Security Benefits:

• Strong Encryption:
  WireGuard uses modern encryption algorithms like ChaCha20 for secure data transmission.
  
  
• Minimal Codebase:
  Its small codebase reduces the potential for vulnerabilities and bugs.
  
  
• Perfect Forward Secrecy:
  WireGuard generates a unique session key for each connection, enhancing privacy by preventing past or future sessions from being compromised if one key is ever breached.
  
  
• Fast and Efficient:
  WireGuard's lightweight design makes it faster and more efficient than older protocols, like OpenVPN, while still maintaining a high level of security.
  
  
• Simplified Security:
  The tight coupling between peer identity and IP address allows for simpler and more reliable firewall configurations.

The VPN is implemented securely but doesn't enhance your security posture. TLS1.3 supports chacha20 as well so no difference from a plain old HTTPS connection. PFS is a standard feature of TLS as well.

You could always decide to set up your own Virtual Private Server (VPS). With a consumer VPN, your privacy depends on two main factors: 1/ whether you can prove that the company doesn't sell your privacy secretly behind your back and 2/ whether the subscription fee is enough to pay for the lawyer's coffee.

hdmi said:

You could always decide to set up your own Virtual Private Server (VPS). With a consumer VPN, your privacy depends on two main factors: 1/ whether you can prove that the company doesn't sell your privacy secretly behind your back and 2/ whether the subscription fee is enough to pay for the lawyer's coffee.

Click to expand...

This is likely the most sensible option. Although I don't run a VPS I've been watching some videos about it and it looks very intriguing. It's kind of like owning your own VPN. Something to consider.

frenchman96 said:

Hi Guys

I am quite security conscious, but I admit I use outside WiFi without having VPN protection.

Is it recommended, and if so, which one and is it free?

Click to expand...

I love this kind of threads
Some get it right and some less right.

Question Use public wifi with or without VPN
Most internet traffic is over HTTPS so it is encrypted.

The reason for using a VPN when using Public hotspots is that it is possible to pick up some traffic and if DNS requests is not encrypted unless it is over HTTPS... And even you use DoH you can still see where the traffic is going as the IP destination still shows in the network. (easy to pick up with Wireshark and setting the wifi card in monitor mode)
So if as TS mention is "quite security conscious" Then Yes, always use VPN when you are on a network you do not trust in blind.

As for VPN and privacy.. that is a fun thing to see some talking about.. Yes VPN is one small link in a chain of steps to have Privacy. This link is broken the second you log in on Google or has a Google android phone(Google-ID), or Facebook or other sites where your real identity are known. Then they know who you are anyway even if you use Tor or VPN.. The chain is broken..
If you are behind a CG-NAT you dont need a VPN for privacy.. Unless.. you want to hide your traffic from your own ISP.
Sell-data is often behind a CG-NAT.. Starlink is too.

So VPN for privacy Yes, BUT it is only one step of many that has to be taken,
VPN for security, Yes when you are on an network you dont trust. or if you want an end-to-end encrypted connection. (Say you want to log in to your home computer from your laptop being on the other side of the world)

Free VPN's that dont spy.. The only one i know of that i can answer to 99.8% is Proton VPN
I use a paid Swedish VPN service. that i know to 100% dont log traffic.