DNS, WebRTC and IPv6 leaks
Leaks are serious security flaws that we always pay close attention to in our reviews. When it’s said that a VPN is leaking, this often means that the DNS requests from your connection are sent directly to the ISP’s DNS server instead of through the VPN as they should. This is one of the most common flaws even in some of the most reputable VPNs, and if they happen constantly then your subscription is essentially a complete waste of money. DNS leaks allow ISPs to see through the VPN and detect which websites you visit and find out, for instance, if you’re torrenting. Likewise, digital eavesdroppers are also able to see and intercept your traffic, which is precisely the opposite of what VPNs are used for.
WebRTC uses a special communication protocol called STUN that allows websites to see the IP addresses of visitors. In turn, when using a proxy or a VPN your IP address is disguised and in doing so you’ll circumvent any geographic restrictions. But this flaw means the STUN request can leak outside the VPN, thus exposing your real IP address to the website in JavaScript – and at that point the least of your concerns is overcoming such barriers. As with DNS leaks, if you’re torrenting, then there’s a high chance of being caught and having to deal with the legal implications.
Then there are IPv6 leaks that can be a problem too, though they’re the least common of the three. IPv6 is the successor to IPv4, a much bigger and safer form of IP address that will eventually take over the internet – though at this point the online world still relies on IPv4. Most VPNs offer IPv4 leak protection but not many of them are still to provide the same for IPv6 yet. If the IPv6 is targeted on a website and not IPv4 and a VPN doesn’t utilize this feature, then this is known as an IPv6 leak and can be solved by disabling IPv6 communications when using a VPN, which is actually the procedure usually adopted by most providers that offer this protection.
The strength of encryption and exploits
Unless taking advantage of the these leaks, it’s actually very hard to exploit a VPN. Remember that this type of software was made for security purposes and fortunately VPNs are some of best tools for online security. 128-bit encryption is a pretty solid protection but it’s worth opting for the standard these days, 256-bit, which is also the strongest level of encryption in the market, is unbreakable to date, and is even used by the military. Because of this, it’s much easier for attackers to try steal the decryption keys from the VPN servers, but even that is very unlikely since it involves a lot of time and money.
The bottom line is that while VPNs are not perfect and do have known vulnerabilities, it’s still much better to use them than going online unprotected, so long as you choose a trustworthy provider.
Leo S.
Adam B.
