Salty, 3 months ago

@skyglowberlin Only if your VPN credentials are sent unencrypted. In which case, your VPN is ... not a good VPN.

But these days web sites are all SSL, in which case your credentials are sent encrypted already so a VPN adds little or no value.

heiglandreas, 3 months ago

@Salty @skyglowberlin HTTP over TLS is not the only network traffic.

Think DNS queries. So people will not know WHAT you looked at on youporn. But they know THAT you checked something there.

Or (hopefully not but....) your email client.

Also in unencrypted networks any other person in the network might be able to see your traffic.

Salty, 3 months ago

@heiglandreas @skyglowberlin All you've done in that case is changed 'someone nearby might know my DNS query' to 'the VPN provider definitely knows my DNS query'. If that's something that worries you you can try DNS-over-HTTPS. If you're watching porn in public it probably doesn't though. :)

Salty, 3 months ago

@heiglandreas @skyglowberlin Hmmm, and by the same logic, using DNS-over-HTTPS just changes 'VPN provider definitely knows my DNS query' to 'Mozilla definitely knows my DNS query'.

heiglandreas, 3 months ago

@Salty @skyglowberlin But now it's much more spread out and lesseasy to figure out by governments whether you visited websites regarding abortions or help against domestic violence....