1
0
mirror of https://github.com/PrivSec-dev/privsec.dev synced 2024-12-21 20:31:33 -05:00

Clarifications on Connectivity Check

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2022-10-11 05:43:14 -04:00
parent 6247fcf2b1
commit 401500e762
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2

View File

@ -70,9 +70,9 @@ Android 7 and above supports a VPN killswitch and it is available without the ne
## Connectivity Check
Connectivity checks on Android [do not go through the VPN tunnel](https://mullvad.net/en/blog/2022/10/10/android-leaks-connectivity-check-traffic/) (they are not supposed to anyway). This is generally not a cause for concern, however, you should be aware that Google and a network observer outside of the VPN provider and their infrastructure can see that there is an Android device with your actual IP address.
Connectivity checks on Android [do not go through the VPN tunnel](https://mullvad.net/en/blog/2022/10/10/android-leaks-connectivity-check-traffic/) (they are not supposed to anyway). This is generally not a cause for concern, however, you should be aware that Google and a network observer on your internet service provider (ISP)'s network can see that there is an Android device with your actual IP address.
On GrapheneOS, connectivity checks by default are done with GrapheneOS's own servers, instead of the Google ones. Said network observer can see that you are using a GrapheneOS device. If you want to appear like a regular Android device instead, go to **Settings****Network & internet****Internet connectivity check** and select **Standard (Google)** instead.
On GrapheneOS, connectivity checks by default are done with GrapheneOS's own servers, instead of with Google ones. A network observer on your ISPs network can see that you are using a GrapheneOS device. If you are using a VPN and want to appear like a regular Android device to your ISP, go to **Settings****Network & internet****Internet connectivity check** and select **Standard (Google)** instead.
If you want to, you can disable connectivity check altogether. Note that this will stop captive portal from working.