Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

This question already has an answer here:

I am planning to buy a VPN service just to circumvent the filtering applied by the government. However as I am planning to use OpenVPN on my dd-wrt router, all of my data will pass through this tunnel. My question is that if it is possible for the provider to go through my data. If so, is it also true about the SSL connections like https as well?

share|improve this question

marked as duplicate by Adnan, Xander, TildalWave, Scott Pack, NULLZ Aug 26 '13 at 3:07

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

A VPN will provide a secure tunnel between the device running the VPN client (your dd-wrt router) and the VPN server (hosted by your VPN provider). All traffic that gets routed through the tunnel will be reasonably secure against monitoring and tampering, but only while its in the tunnel.

On either end of the tunnel, it is still vulnerable. The VPN provider will be able to monitor all of the traffic as it passes in and out of their end of the tunnel, just as your dd-wrt router will be able to monitor the traffic as it passes in and out of its end.

A VPN is only useful if:

  • You trust the network and/or device running the VPN client
  • You trust the VPN server
  • The adversary you wish to protect yourself from is thought to be somewhere between the two

The same goes for HTTPS and anything else that uses SSL/TLS.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.