Is a VPN needed with DNS over HTTPS and Encrypted Client Hello? (feddit.nl)

submitted 10 months ago by [email protected] to c/[email protected]

13 comments fedilink hide all child comments

I was wondering if a VPN would add any kind of security or privacy if one is connecting to a host with a client/browser that supports DNS over HTTPS and that host supports encrypted client hello. Is there a way for the ISP or anything in between to shape traffic or even know what is being accessed? The only thing that should be visible is traffic between two IP addresses right?

you are viewing a single comment's thread
view the rest of the comments

[-] [email protected] 11 points 10 months ago

The DNS traffic might be encrypted but that doesn’t mean that other protocols are. A VPN tunnel encrypts all traffic passing through regardless of protocol.

[-] [email protected] 4 points 10 months ago* (last edited 10 months ago)

This is the correct answer. A VPN encrypts and obfuscates all your connections, not just the web browser.

If all you care about is hiding the websites you visit from your ISP, DNS over TLS is fine. But just remember that you’re bleeding data by using your real IP (ISP, geolocation, etc.). And any other connection, is just unabashedly, you.