Tor network

[Paul77]

- traffic is NOT encrypted without VPN
- trust me it´s always better that a⁤ VPN hosted somewhere far away without knowing your name and anything about you sees what⁣ you do in the interned instead of your local carrier who knows exactly everything about⁢ you and can even terminate service, throttle you down etc. Always safer with a VPN!︀
- keep reading the whole thread and then come back asking again relevant stuff. Just︁ a hint go and try loging in to your accounts with Tor and then compare︂ it with a VPN. Good luck with that.

 

[KDX]

99% of︀ traffic is encrypted VPN or not. TLS is used almost everywhere

 

[JamesDonkey]

You don't︀ know how VPN works

- traffic IS encrypted without VPN. Even on this very website.︁

- Who are you to trust you? I trust computer science more. How have you︂ measured that it's safer to always use VPN?

- you have nothing to say

 

[Marie Manila]

This is mostly true. Most websites uses SSL for transport encryption.
But you have‍ one big leak there! DNS is not encrypted by default!
The provider can see which⁠ domains you are accessing, but he cannot see, what you are reading/posting there.

An the⁤ web server can save your IP. This is usually not a big deal, except he⁣ has to hand out the IP because of a lawsuit.

 

[KDX]

That's why you use DNS over HTTPS. 1.1.1.1 , The free app that makes your⁣ Internet faster.

Although the SNI (server name identifier e.g. www.offshorecorptalk.com) can leak during the⁢ TLS handshake.

One bad part about VPNs is that, if you forget to turn it︀ off while making a payment, you can get your account frozen like with PayPal

 

[JohnLocke]

That was a good one, will have to‍ check it out.

 

[KDX]

Just set your DNS server IPs to 1.1.1.1 and 1.0.0.1 I believe as‌ the backup and you're good. Do the same on Chrome settings so that you can‍ take advantage of DNS over HTTPS. Also, I recommend using Brave browser as it's quite⁠ good with its built-in privacy features incl. Ads & tracker blocking. It has some bloat⁤ but you can quite easily remove it.

 

[RealDude]

For mobile devices i use AdGuard DNS (Method #2). I know its made by russians…‌ 😉

They support

• DNS-over-HTTPS
  
• DNS-over-TLS
  
• DNS-over-QUIC
  
• DNSCrypt
  
• Plain DNS
  

https://adguard-dns.io/en/public-dns.html