Neither, if I understand it correctly. It provides a secure environment for logging into the captive portal (rather than using the OS-built ins), without having to disable/change other network/security settings (DNS/HTTPS Everywhere).