2

I gather they can probably see everything if they want to on non-SSL sites but how about on SSL sites, can they do it?

1

No, they can't, assuming you trust the certificate on the site.

However, your VPN provider can still monitor metadata that is not encrypted, such as DNS requests and IP addresses of hosts you communicate with. They could at least reveal on what domains you have possibly visited.

  • Regarding "domains you have possibly visited", are there ways to conceal those information? – IMB Oct 10 '18 at 4:56
  • You can't hide the IP addresses you are connecting to. If only one site is served from the address, it clearly reveals where you've visited. I'm not too familiar with DNS encryption etc. schemes, "How to prevent DNS request from being observed" is really another question. – sebasth Oct 10 '18 at 5:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.