I'm planning on getting a VPN service (probably Privateinternetaccess) and read that it is imperative to plug DNS leaks. The only information I found on google describing what these are is here and I don't find it very detailed. What is a DNS leak? Why is it such a huge compramise if a regular one is used, that's only one more person who knows what your up to?
Tell me more
×
IT Security Stack Exchange is a question and answer site for
IT security professionals. It's 100% free, no registration required.
|
|
If you connect through a VPN, but your queries are still being sent over the normal network, anyone that can sniff the network, will be able to see your DNS requests. When you are using a VPN you are trying to avoid this at all cost as you want to prevent people from eavesdropping on what you are doing (from a privacy point of view). So let's say we have Bob that wants to visit site A in a normal situation with Trudy on the network. Trudy will first see Bob perform a DNS request and see where he wants to go. Furhtermore she might even to see the contents of where Bob is going if that site is not secured with, for instance, SSL. Another risk is that when you use a VPN for privacy, and your DNS requests still pass the normal network, is that Trudy might try to replace the DNS server and send you a wrong IP for a certain site. She then redirects you to a proxysite or a phishing site to steal your data. Even when you are using a VPN, you would still be tricked in surfing to a malicious website or proxy, compromising the privacy part you want to use the VPN for. |
|||
|
|
