Discord FAQ 07 - SPN Explained | Compare Logging Between VPN and SPN

[@SafingIO]

I hope this video is a start into better visualizing what we do differently. There is more to how VPNs can get attacked with pattern matching and so on... where the local isp your pc is connected to can actually know more, and I initially wanted to get into that as well, but, that would have been a much longer video. Also SPN does protect more then what is shown in the video, but again, that would have been a much longer video. So I hope this is a great stepping stone into other explanations, so please let me know what you would want to know more about. Here is ok and on YT.

[@BillAnt]

At 6:35 VPN companies be like "Trust me bro, we're not logging anything!" Riiiiiiight! lol So basically an SPN is a channel aggregator breaking down the packets into smaller bits through different servers, then reassembling it at the user's device.

[@SafingIO]

@@BillAnt not sure how you interpret channel aggregator in this case. With SPN your internet connection that typically would originate from your PC is broken down and resembled at both ends of SPN, Your PC and the exit node. With a VPN the connection ordinates 100% from your PC and is only piped through the VPN, which is why they have to be concerned about leaking and such - when a packet "leaks" from the pipe it is still a 100% valid connection.

[@Pol-to5tg]

Great vibes! Looking forward to learn more about this protocol.

[@kevinhughes9801]

Great breakdown. Question how much latency does spn add to connection?

[@SafingIO]

There is an effect on latency, but it is minimal, and for normal use you should not feel it. Because of how each rout is calculated for each connection things like speed tests are not a good source on telling you what you can expect... since it only reflects that one rout

[@kevinhughes9801]

@@SafingIO ok thanks

[@BillAnt]

Any time you have any extra servers between you and the website, there will be some extra inherent latency, no way around it. It's a privacy trade-off, except if you're using a direct connection with a "burner phone". ;)

[@HoOoleander]

Maybe the idea was already outspoken, but can you add a funktion to allow a Domain/Connection etc. temporarly. Like the NOSCRIPT addon for Firefox for example. Sometimes i want to visit a webside only once and have to allow the domain. It would be cool if the rule exaption would turn back after about 10 - 15 minutes or untill Poortmaster gets restarted. Thank you for this good tool.

[@SafingIO]

Adding such an option would fit when we touch the prompting system again. We are currently working on the backend of the ui system where we are moving a couple features into the same system. New prompts with more options are something we would be looking into.

[@SL-sg9tk]

Since the SPN obviously adds latency i can still watch 4k HDR content from Netflix. Using CTRL ALT SHIFT D confirms this as it shows every aspect of what you`re getting from Netflix at any given time. If im downloading a large game patch, i toggle off SPN and with a GIG connection up and down the patch downloads very fast, once done i turn SPN back on. Portmaster isn't perfect, one example is the refresh rate of the network activity NEEDS to be configurable or at least increased drastically. But from what i understand Portmaster is still in its infancy and i respect what they have accomplished so far with the SPN. Im excited to watch this product grow and ive subscribed to pro for a year to help support the development. Thank you Portmaster/SPN team!

[@SafingIO]

Super cool Feedback. Thank you! Regarding the download. Why do you disable spn for the whole pc and not just the application that downloads? If you trust that domain and it’s the same every time you can also just exclude the single domain from spn

[@BillAnt]

At 2:45 you mentioned that without a VPN the IP and DNS/websiteURL is not encrypted. True, but the actual data is via HTTPS/TLS. I prefer a direct faster and lower latency connection using a "burner phone" with no name or any info on file and change it once a month. ;)

[@SafingIO]

Which of course is work on your end, but interesting approach, not possible in all countries as Europe requires KYC for mobile plans. Also we are thinking about making combining multiple internet connections an option, so your traffic gets split between the ISPs - that would also increase the available speed.