News for hackers. Stuff that matters.

A comment on Microsoft bakes a VPN into Edge and turns it on. Parent comment

Re:Microsoft bakes a VPN into Edge and turns it on by hamburglar on Saturday October 01, 2022 @08:12AM (#33046021)
The privacy issue is obvious. If my browser is funneling all of its traffic through a specific VPN instead of letting my system handle it, I have to wonder whether that choice was based on the VPN operator wanting to see my data or cooperating with someone who does.

This is like finding out Microsoft decided all internet traffic on windows should be proxied through their servers. Could there be a benefit? Yes. Does it raise serious questions? Most definitely.

[ Parent | on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on by nearbuy on Sunday October 02, 2022 @06:15PM (#33060879)
> If my browser is funneling all of its traffic through a specific VPN instead of letting my system handle it

It's not. According to the article, it only funnels insecure traffic through the Cloudflare VPN (eg, to a site with an invalid certificate). And this doesn't prevent you from using your own VPN as well.

If you're connecting to a site over HTTP, and the packet takes 10 hops to get there, that's 10 machines that can see who you're connecting to and what data you're sending. Including, in all likelihood, a major CDN like Cloudflare. Also including anyone on the same public Wifi network. This data was never kept private to begin with.

If you're connecting over HTTPS with a valid certificate, the VPN isn't used. Even if it were though, they couldn't see your data. It's encrypted.

[ Parent | on HN ]