Key facts
- Senator Ron Wyden has requested the NSA provide public guidance on VPN usage.
- The guidance is intended to help Americans protect communications from foreign adversaries.
- Wyden highlighted limitations of VPNs, including traffic decryption at servers and metadata exposure.
- The senator asked for specific recommendations on VPN architectures, such as single-hop vs. multi-hop.
- Wyden also inquired about the effectiveness of services like Apple Private Relay, Nym, and Tor.
Senator Ron Wyden has called on the National Security Agency (NSA) to issue public guidance on the best practices for using virtual private networks (VPNs) to safeguard communications from foreign adversaries. Wyden, a Democrat representing Oregon, expressed concern that existing recommendations do not adequately address the nuances and limitations of VPN technology.
VPNs encrypt internet traffic and mask users' IP addresses, but Wyden noted that decrypted traffic can still be vulnerable once it passes through a VPN server. He also pointed out that certain metadata, like timestamps, can still be exposed, potentially allowing for user profiling by nation-states. These limitations mean users may not be fully aware of the protections their VPNs actually provide.
In a letter sent to NSA Director General Joshua M. Rudd, Wyden requested updated guidance that specifically addresses these technical details. His inquiry includes questions about the adequacy of single-hop VPNs, which use one server to decrypt traffic, versus multi-hop architectures that route traffic through multiple servers. He also asked about the effectiveness of features like random delays and cryptographic padding in thwarting surveillance. Additionally, Wyden inquired about the specific services Apple Private Relay, Nym, and Tor.