getting started with VPN's

[Patrick Asselman]

Anyone with physical access to your data traffic can do DPI. Your 
neighbour can catch your wifi data. Your ISP can tap the cable. Every 
router and other network device along the way to your destination can 
tap into the data. Your colleagues can do DPI on your LAN at the office. 
All it means is that instead of only looking at the headers of your data 
to see where it came from and where it should be passed on to, they also 
look into the data itself of your data packets.

Whether that is useful to them depends on the contents of the data. If 
you encode your data, they can only read the encoded data. The encoding 
can be done on many levels. For VPN's I think IPsec and SSL are the most 
used ways of encoding. Nothing stops you from adding another security 
layer if you fear that this is not sufficient.

Best regards,
Patrick


On 2014-10-14 07:33, thufir wrote:
> On Mon, 13 Oct 2014 11:35:29 -0400, Nathan Dorfman wrote:
>
>
>> It's impossible for your ISP to inspect the plaintext contents of 
>> your
>> packets if you're using a VPN.
>
>
> Is it only the ISP who is able to accomplish packet inspection?  Or, 
> can
> websites/etc also inspect packets?
>
>
>
> thanks,
>
> Thufir