Chapter in this post:
Not every VPN is the same, there are sometimes massive differences. An important feature that your VPN provider should have implemented is its own zero-knowledge DNS. What is hidden behind the term “DNS”, what “zero knowledge” has to do with it and why a VPN is unsafe without this service is what I will explain to you in this guide. I also have an example for a VPN provider who has its own 256-bit encrypted zero-knowledge DNS on each of its servers so that web requests are as secure as possible. With the appropriate apps for Mac, Windows PC, Linux, iOS, Android and Co. you can use the Internet completely anonymously.
The abbreviation DNS stands for Domain Name System. The "domain name" means the name of a website, i.e. the URL that you enter in the address bar of your web browser, that you have saved as a favorite or clicked on as a link. This domain name is hunted down after being entered and confirmed by the system called DNS in order to find the appropriate IP address. Because computers and servers communicate on the web with blocks of numbers in IP addresses rather than with full names. With an unprotected DNS that is used without a Virtual Private Network (VPN) or a third-party DNS that is built into its service by a VPN provider, there is always the possibility that third parties could spy on, redirect or censor your activities.
Literally translated, zero knowledge means something like “zero knowledge” or “no knowledge”. This is due to the fact that such a DNS does not log the data traffic and does not save any personal data in logs. It is not recorded from which location or at what time which website was accessed. If a VPN service has such a DNS running on its servers, then you can be sure that the data traffic and the resulting data will not be recorded. In addition, a separate DNS running on the VPN's servers ensures that all inquiries and calls run through the same encrypted tunnel - this prevents third-party queries and interference.
A third-party DNS is often not or inadequately protected and is still used by VPN providers. This means that the data traffic may be encrypted, but the requests for website calls leave the own encrypted tunnel, only to be smuggled in again. This opens up the possibility that DNS blocks, filters or censorship measures will continue to take effect. Whether hackers, companies, Internet providers or governments: access to the data and queries is not excluded here. This can only be avoided with a VPN's own DNS, which works encrypted and thus against the dangers mentioned as well as before Phishing and further manipulation.
A virtual private network with zero knowledge DNS is e.g. B. ExpressVPN. I have an overview of the features and advantages of this provider for you summarized in this post. In addition to the DNS running individually on each server and with 256-bit encryption, ExpressVPN also offers split tunneling, a protocol selection, a kill switch, a no logs policy, the option to stream content that is not available in this country and much more . The ExpressVPN app is available for macOS and iOS as well as for Windows, Android, Linux - and as a browser extension for Google Chrome and Mozilla Firefox. Due to the extensive protection and encryption of Internet traffic, DNS queries and other data paths, the service is worth its $ 99,95 / year.
Do you want to use a VPN to connect every website and streaming service such as B. To call up Netflix almost everywhere, you have to pay attention to certain functions of the apps. Free VPN apps in particular do not offer a comprehensive service for encrypting website requests, implementing your own DNS and thus offering extensive protection. If you are looking for VPNs that offer an all-round service and offer all the important functions for safe surfing via specially selected server locations, you have to spend a bit of money. The good thing about the ExpressVPN VPN example shown is that it comes with a 30-day money-back guarantee. So take a look at the post linked above and choose the right package on the provider website;)
Jens has been running the blog since 2012. He appears as Sir Apfelot for his readers and helps them with problems of a technical nature. In his free time he drives electric unicycles, takes photos (preferably with his iPhone, of course), climbs around in the Hessian mountains or hikes with the family. His articles deal with Apple products, news from the world of drones or solutions for current bugs.