On 17/07/2019 12:16, wrote:
On Wednesday, 17 July 2019 12:05:11 UTC+1, wrote:
One of my cow-orkers claims that because he used a proxy / vpn, even his isp cant tell what sites he is visiting.

This seemed a little far fetched, but now I am wondering if it is correct??

If he is using an encrypted VPN and it is set up so that DNS lookups
are sent through the VPN as well as the actual browsing, then there
is no way for his service provider to know what he is doing. However,
this just moves the problem elsewhere. How much does he trust the
VPN service provider?
How likely is it that those who like to monitor things perhaps
concentrate their efforts on VPN providers?

That is why onion routing is in play.

Requests are run around a ring of VPNs and with enough traffic the 'my
packet in, to remote server X' relationship is almost impossible to
detect and certainly to legally prove.


The second point is that if you want to deep packet inspect you must do
it on the far side of the VPN where traffic is unencrypted BUT the
tendency now is to use HTTPS everywhere so THAT blows up too.

So to reiterate:

Using a VPN means that YOUR ISP doesn't know who you are connecting to
and what is in each packet.

Using HTTPS means that no one else knows what is in each data packet either.

Using onion routing means that no one can even make a fair guess whom
your packets are destined for. Let alone the contents.



He could of course set up a virtual machine in a data centre somewhere
and VPN to that, but it would have to be paid for.

Its trivial. £120 a year...Less than you pay for an internet connection.

Being untraceable
is not that easy.

Not with emails, no. With web traffic its not that hard if you really
want to do it

https://2019.www.torproject.org/docs...c-unix.html.en



John



--
€œProgress is precisely that which rules and regulations did not foresee,€�

€“ Ludwig von Mises