VPN

Privacy Misconceptions

• VPN shifts trust from ISP to VPN provider — provider sees all traffic, not eliminated
• "No logs" claims are marketing — unverifiable without independent audits
• VPN doesn't provide anonymity — browser fingerprinting, account logins, payment methods still identify
• Free VPNs monetize traffic data — if not paying, you're the product
• Self-hosted VPN exits from your IP — no privacy benefit, services see your home address

DNS Leaks

• DNS queries can bypass tunnel — reveals visited sites despite encrypted traffic
• Test after every setup — leak test sites show if DNS goes through ISP instead of tunnel
• System DNS settings may override VPN — force DNS through tunnel in client settings

Kill Switch

• Brief VPN disconnects expose real IP — happens without user noticing
• Kill switch blocks all traffic when tunnel drops — essential for privacy use cases
• Test by forcing disconnect — traffic should stop completely, not fall back to direct