Mullvad VPN has confirmed the existence of critical DNS leak problems in certain Android VPN apps due to inherent bugs in the Android operating system.
The issues can occur in multiple scenarios, such as if the VPN is active without any DNS server configured, or for a short period while the VPN app is reconfiguring the tunnel or being force stopped/crashing.
These leaks can expose users' browsing history, location, and ability to bypass internet censorship, even with the "Always-on VPN" and "Block connections without VPN" settings enabled.
Mullvad has reported the issues to Google and is implementing a workaround, but the problems should be addressed at the OS level to protect all Android users.
DNS traffic can leak outside the VPN tunnel on Android
https://mullvad.net/en/blog/2024/5/3/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android
Does it apply to ios devices?
No, the DNS leak issues described do not apply to iOS devices. The search results specifically mention that the problems stem from bugs in the Android operating system itself, and only affect certain Android VPN apps.
The Mullvad VPN app for iOS uses the "on-demand VPN" function which acts as a kill switch when the VPN is connected, and should not leak traffic.
The article also notes that while there are some potential privacy issues with iOS, such as traffic to Apple services bypassing the VPN tunnel, there are no issues analogous to the Android DNS leaks described.
So in summary, the critical DNS leak vulnerabilities are limited to Android devices and apps, and do not impact iOS users of Mullvad VPN or other VPN services. The problems require fixes at the Android OS level by Google.
William K⚡Santiago🔑☢️
npub1h3f…96sj
2024-05-07 15:19:41
Author Public Key
npub1h3fzzzeq60acjvnyvw34rpn5clkaueteffmkt3ln4ygekg9lcm0qhw96sjPublished at
2024-05-07 15:19:41Event JSON
{
"id": "7c7f374ab8c94490620aaa608614719710c7070ac3f289b6ff49b7133a00a77d",
"pubkey": "bc52210b20d3fb89326463a3518674c7edde65794a7765c7f3a9119b20bfc6de",
"created_at": 1715087981,
"kind": 1,
"tags": [],
"content": "Mullvad VPN has confirmed the existence of critical DNS leak problems in certain Android VPN apps due to inherent bugs in the Android operating system.\n\nThe issues can occur in multiple scenarios, such as if the VPN is active without any DNS server configured, or for a short period while the VPN app is reconfiguring the tunnel or being force stopped/crashing. \n\nThese leaks can expose users' browsing history, location, and ability to bypass internet censorship, even with the \"Always-on VPN\" and \"Block connections without VPN\" settings enabled.\n\nMullvad has reported the issues to Google and is implementing a workaround, but the problems should be addressed at the OS level to protect all Android users.\n\nDNS traffic can leak outside the VPN tunnel on Android\nhttps://mullvad.net/en/blog/2024/5/3/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android\n\nDoes it apply to ios devices?\nNo, the DNS leak issues described do not apply to iOS devices. The search results specifically mention that the problems stem from bugs in the Android operating system itself, and only affect certain Android VPN apps.\n\nThe Mullvad VPN app for iOS uses the \"on-demand VPN\" function which acts as a kill switch when the VPN is connected, and should not leak traffic.\n\nThe article also notes that while there are some potential privacy issues with iOS, such as traffic to Apple services bypassing the VPN tunnel, there are no issues analogous to the Android DNS leaks described.\n\nSo in summary, the critical DNS leak vulnerabilities are limited to Android devices and apps, and do not impact iOS users of Mullvad VPN or other VPN services. The problems require fixes at the Android OS level by Google.",
"sig": "5d3d3e3fd75d45373d8d27fcb61ff963bbc7b56fcbd0dabc7f2166ae13835e53b97bf10f07ce28c87b85dc16ae40d16426fdf10062eb27bf1c0dd61b9121a0b0"
}