Using VPN inside my home LAN?

Page 2 of 2 FirstFirst 12

  1. Posts : 18,432
    Windows 11 Pro
       #11

    antares said:
    I agree on that too, problem is that not all websites are "https", i.e., non encrypted, and that's when you need a solution like VPN. Also, even if you visit an https, if you have no VPN, someone might find out that you visited that website. With VPN all your traffic, including websites visited are encrypted, so your privacy is complete (as long as the VPN server deletes your history)
    So, let's say you get your plan working and you set up a VPN inside your local LAN at your house. The VPN stops at your router and then the traffic goes through a regular internet connection to your ISP, where it gets sent via regular internet to the destination website. The only thing you have done is add one more layer of encryption to the very tiny part of the entire flow of data that is the most secure part of it already because you should be behind the NAT translation firewall built into your router and a hacker would have to be camped out within range of your WiFi (in your driveway or front yard) to intercept that signal.

    Now, if you feel like you need to protect yourself when using public WiFi - that is entirely different. A lot of routers, such as my Netgear R7000 in the Nighthawk series, have built in VPN servers. On public WiFi I can VPN to my home router which then connects me to the internet. However, the built in VPN server on the router (and as far as I know all routers) is only for connections originating outside the LAN.
      My Computer


  2. Posts : 9,789
    Mac OS Catalina
       #12

    This is going way too far. As far as Packet sniffing, to start off with, your email is sent in the clear over the Internet, unless you encrypt it. Passwords to websites that use https can also be sent in the clear over the Internet.

    Unless someone has been able to break your Passphrase to get into your network to sniff the packets. It will not happen if you have a strong password for the SSID. All that it takes for Ethernet is someone connecting to your router to packet sniff, unless you use Radius for Wifi and a Proxy.

    As for the Gateway your ISP leases to you. It works for the majority, because they do not want to sink a whole lot of money into infrastructure if the need is not there. I invested in my network with using two Access Points, one a POE business grade, so that we would have not only range, but also that it would stay on while the UPS is up, until I start shutting things down, then it is the ISP Gateway that I would roll over to.
      My Computer


  3. Posts : 354
    Windows 10x64 Pro
    Thread Starter
       #13

    NavyLCDR said:
    So, let's say you get your plan working and you set up a VPN inside your local LAN at your house. ...server on the router (and as far as I know all routers) is only for connections originating outside the LAN.
    Agree with everything you said
    bro67 said:
    As far as Packet sniffing, to start off with, your email is sent in the clear over the Internet, unless you encrypt it.
    True if you're using email clients such as Outlook, but if you use webmail provided by Google, Yahoo, etc, I understand that email is encrypted over https.
      My Computer


  4. Posts : 9,789
    Mac OS Catalina
       #14

    It has nothing to do with Outlook, webmail. No email is encrypted over https. You would need to use a SSL certificate and PGP type encryption, with the receiver having a key to unlock what is encrypted in the email. Anything you send over the web is going to be seen "in the clear" if someone finds a way to get within the inside boundaries of a router between you and whatever website you are going to.

    You have to remember that a single server can host many websites. Especially if they are using Docker to host websites. A connection and website is only as good in security, as the person or persons maintaining it.
      My Computer


  5. Posts : 354
    Windows 10x64 Pro
    Thread Starter
       #15

    Maybe I think that because whenever I use Gmail or Yahoo webmail I see that the connection is encrypted (there's a lock with https during all the session) from the time you sign in until sign out, so it works like a point to point encryption similar to that used in Whatsapp messages. In the past the encryption was only applied to the password/username exchange.
      My Computer


  6. Posts : 18,432
    Windows 11 Pro
       #16

    antares said:
    Maybe I think that because whenever I use Gmail or Yahoo webmail I see that the connection is encrypted (there's a lock with https during all the session) from the time you sign in until sign out, so it works like a point to point encryption similar to that used in Whatsapp messages. In the past the encryption was only applied to the password/username exchange.
    The data transmission of the email is secure/encrypted. The storage of that email on Gmail servers...not as much.

    Is Gmail Safe For Work? -Kaspersky Daily |
      My Computer


  7. Posts : 9,789
    Mac OS Catalina
       #17

    Using VPN inside my home LAN?


    Regardless of that little lock you see. Your email is still sent in the clear, same as your loging information.

    There is no encryption when you connect to a https website that uses or does not use SSL.

    Unless you use a VPN to connect directly to an email server. Everything you do online, can be seen by anyone that may be looking at ways to get around security protocols on a website.
      My Computer


  8. Posts : 18,432
    Windows 11 Pro
       #18

    bro67 said:
    Regardless of that little lock you see. Your email is still sent in the clear, same as your loging information.

    There is no encryption when you connect to a https website that uses or does not use SSL.

    Unless you use a VPN to connect directly to an email server. Everything you do online, can be seen by anyone that may be looking at ways to get around security protocols on a website.
    So, then, I guess all my banking information is sent in the clear too, because it goes by https:// with a lock symbol too. I would suggest you do a bit more reading to familiarize yourself with what https:// and the lock symbol means.

    How does HTTPS actually work? | Robert Heaton

    Mixed content blocking in Firefox | Firefox Help

    When you visit a page fully transmitted over HTTPS, like your bank, you'll see a green padlock icon in the address bar (see How do I tell if my connection to a website is secure? for details). This means that your connection is authenticated and encrypted, hence safeguarded from eavesdroppers and man-in-the-middle attacks.
    Using VPN inside my home LAN?-capture.jpg

    I guess Firefox must by lying about gmail.

    Using VPN inside my home LAN?-capture1.jpg
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:49.
Find Us




Windows 10 Forums