Yeah but app dns requests and background services are sometimes not TLS. When using VPN all traffic is encrypted. Thus safer.
Comment on How VPNs really work: Protocols, safety and myth - Sentient Rant
dan@upvote.au 1 day ago
- It encrypts your internet traffic in transit
Note that most sites use TLS these days, so your data is already encrypted in transit.
sentientRant@lemmy.world 1 day ago
Sxan@piefed.zip 1 day ago
Most web data. “Who you’re talking to” isn’t.
theunknownmuncher@lemmy.world 1 day ago
True, however TLS does not encrypt the hostname/IP address of the servers that you are connecting to, so your ISP can monitor the servers you visit. A VPN provides an encrypted tunnel for your traffic, so your ISP can only see that you are communicating with the VPN server. However, the VPN provider can see the hostname/IP of the servers in order to forward the traffic to its destination.
Ideally the VPN provider does not monitor or keep logs of the connections, however this is not always the case. A VPN offers privacy from the ISP or from other clients connected to the local network when using public WiFi.
It can also provide some level of anonymity, because the server that you are connecting to will only be able to see the VPN IP address connecting to them, instead of your home IP address. However, it is possible to still be identified by other means besides your IP adress, like using cookies or browser fingerpinting.
dan@upvote.au 1 day ago
The hostname will be encrypted eventually (ESNI) but you’re right that the IP address is visible.
Anafabula@discuss.tchncs.de 1 day ago
ESNI has largely been dropped in favor of ECH
dan@upvote.au 19 hours ago
Thanks - I forgot about that.