Proton apps pinging Google API + sending reports back after opting out

ignoramous

[deleted] Could you please explain the reasoning behind locking local DNS filtering in Advanced proxy mode?

Rethink's On-device blocklists should continue to work regardless of WireGuard running in Simple / Advanced modes.

[deleted] My friend recently pointed out that Rethink's advanced proxy mode forces to use an external, non-proxy DNS, which defeats the whole purpose of VPN.

In Advanced mode, Rethink does not split-tunnel DNS (because it isn't possible on Android to do so). And since multiple WireGuards are active, Rethink doesn't know which DNS upstream to choose and hence falls back to using user-preferred DNS as set in Configure -> DNS.

If there are one or more Advanced WireGuard configurations that are set to be Always-on, Rethink would proxy user-preferred DNS over it (unless Never proxy DNS is turned ON in Configure -> DNS).

[deleted]

ignoramous

ignoramous And since multiple WireGuards are active, Rethink doesn't know which DNS upstream to choose and hence falls back to using user-preferred DNS as set in Configure -> DNS.

I only use 1 Wireguard connection at a time, but Rethink still chooses user-preferred DNS. I use advanced mode only because it's impossible to leak network activity by accidentally stopping RethinkDNS. I'd love to see the Lockdown/Always-on implementation for Simple Mode as well..

ignoramous

GlytchMeister because Mullvad has lockdown and always-on

fwiw, Rethink also supports Always-on VPN and VPN Lockdown (aka Block connections without VPN).

GlytchMeister I only want the local, on-device filtering

Rethink can of course do a lot more; and so, it is advisable to continue using Mullvad's official app along with their content-blocking DNS upstreams (which aren't as configurable as ControlD/AdGuard/NextDNS etc), but hopefully it'll be someday.

Dumdum

ignoramous it is advisable to continue using Mullvad's official app along with their content-blocking DNS upstreams (which aren't as configurable as ControlD/AdGuard/NextDNS etc), but hopefully it'll be someday.

What is meant here by "configurable"? As in, you can specifically select domains to deny/allow similar to something like uBlock? I've not used those three services before, but are they more configurable than these Mullvad DNS options?

ignoramous

Dumdum As in, you can specifically select domains to deny/allow similar to something like uBlock?

Yes.

Dumdum I've not used those three services before, but are they more configurable than these Mullvad DNS options?

Yes, they are. Think of those services (AdGuard DNS, NextDNS, ControlD) as if you were running your own pi-hole instance (but of course it isn't yours per se, and you must trust those services to respect your privacy).

tilion_silverbow

Just found this: https://www.reddit.com/r/ProtonMail/comments/1cmcre5/concerns_about_privacy_does_proton_mail_still_use/

Proton responds that notifications are end to end encrypted and that they are working on creating their own system of push notifications for the future.

de0u

tilion_silverbow Haven't they been "working on" that for a long time already?

mmmm

[deleted] I'd love to see the Lockdown/Always-on implementation for Simple Mode as well..

I seem to have lockdown mode enabled and I'm currently only using the 'simple' mode for wireguard...

[deleted]

mmmm AOSP's Lockdown Mode doesn't work the way you think it does in case of RethinkDNS. If you click 'stop' in RethinkDNS app, it'll route everything bypassing whatever proxy you're using. The official Wireguard app, on the other hand, handles it differently. Once the in-app VPN toggle is off, no traffic is allowed to bypass a VPN.

mmmm

[deleted] I did already assume that, in fact in posted about it on these forums the other day. Its just when I read you post above I just went and check, and I got a warning about lockdown mode when I tried to stop the wireguard connection in the rethink app. I assumed that it was the app but it was probable GOS that it came from.

Hb1hf

[deleted]
I have 2 wg profiles in RDNS, one in lock down and the other as always on. I just tested and stopping RDNS dropped all my connection.

mmmm

[deleted] I have just properly tested this. I have simple mode on with a wireguard protonVPN connection. If I press 'stop' at the bottom of the rethink app, and stop again on the pop up message, all connections to the internet appear to cease. So I'm confused about what youre saying. Perhaps I misunderstood as English isn't my first language.

[deleted]

mmmm Thanks for your time. I tested this usecase about a month ago and it gave me a different result. I'm pleased to see RethinkDNS behaving differently. I guess one of the recent updated fixed it.

TrustExecutor

de0u Probably marketing. They should have had another solution since day one.

tilion_silverbow

de0u Yeah, it sure seems like that. Undoubtedly there should already be something else in place. Just thought that especially the e2ee bit was relevant here since another user was asking about it.

de0u

TrustExecutor Probably marketing.

It seems the issue has been around since at least 2020, and one of the commenters in this thread suggests it goes back to 2015, so...

GlytchMeister

I just got RethinkDNS working and I just tried accessing proton mail and calendar with Native Alpha while capturing packets and whatnot, and whaddaya know, proton talks to amazon now instead of google.

DeletedUser370

GlytchMeister proton talks to amazon now instead of google.

Did you try turning off Alternative routing in Proton VPN and see if it's still pinging Amazon servers?

GlytchMeister

DeletedUser370 I use mullvad VPN

« Previous Page