2 posts
DNS leaks happen when domain lookups bypass your VPN tunnel and reach your ISP. Smart Multi-Homed Resolution, IPv6, and WebRTC all open side channels. Here's what leaks and how to plug each one.
Most VPN kill switches live in the app and react after a drop has already leaked traffic. A real kill switch fires before the handshake completes, at the kernel level. Here's the difference.