What VPNs Protect—and What They Don’t

Summary

Sponsored explainer demonstrates how VPNs can hide traffic metadata from an ISP or local observer, but shift trust to the provider. It covers limits including phishing, account tracking and browser fingerprinting, and suggests using VPNs selectively.

Key points

• A demonstration with Kali Linux and Wireshark shows that HTTPS protects traffic content, but DNS and SNI can still reveal information about sites visited.
• A VPN routes traffic through an encrypted tunnel and can conceal some metadata and the user's IP from local observers, but shifts trust from the ISP to the VPN provider.
• In the presenter’s test, DNS over HTTPS did not hide all identifying information; with the VPN enabled, captured traffic appeared as WireGuard traffic.
• A VPN does not make users invisible: logged-in accounts, cookies and browser fingerprinting can still enable tracking.
• The video says a VPN alone does not stop phishing, fake shopping sites or malicious downloads; it presents NordVPN’s additional security features as separate protections.
• The presenter recommends assessing providers’ logging claims, audits, server design and jurisdiction, while saying he cannot personally verify NordVPN’s assurances.
• Suggested uses include public Wi-Fi, reducing exposure to IP-based harassment and accessing geo-blocked content; the presenter notes that dedicated IPs can be tied to a provider account.

Vendors

Related Articles

• Huntress Details M365 Token-Replay Campaign Affecting 79 Organizationshuntress.comNordVPN