Re:Mozilla VPN
by ccktlmazeltov on Friday June 19, 2020 @12:35PM
(#23576062)
Using a VPN adds indirection but can give you a sense of false security as well.
Metadata is obviously the least important data to analyze, but for example a VPN does not hide the size of payloads. TLS 1.3 do addresses that and let's you randomly pad messages but I don't think anybody use that.
The bulk metadata programs, as far as we know, only collect metadata. Which two IP addresses communicated, the routes they took, the size of the payloads, etc. are all "metadata".
HTTPS, AFAIK, does not solve this.