<story><title>VPNs on iOS are a scam</title><url>https://www.michaelhorowitz.com/VPNs.on.iOS.are.scam.php</url></story><parent_chain><item><author>kogir</author><text>I think Apple is transparent about Always on VPN (blocking traffic except over the tunnel) requiring provisioning using MDM tools. Apple Configurator is free and allows anyone to set this up.&lt;p&gt;Any other VPN is just best effort.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;support.apple.com&amp;#x2F;guide&amp;#x2F;deployment&amp;#x2F;vpn-overview-depae3d361d0&amp;#x2F;web&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;support.apple.com&amp;#x2F;guide&amp;#x2F;deployment&amp;#x2F;vpn-overview-depa...&lt;/a&gt;</text></item></parent_chain><comment><author>Youden</author><text>The issue in the article isn&amp;#x27;t that the VPN is sometimes inactive, it&amp;#x27;s that when the VPN is active, some traffic escapes the VPN.&lt;p&gt;As far as I can see the linked page doesn&amp;#x27;t say that your VPN will leak unless you&amp;#x27;re using Always On.&lt;p&gt;Plus, that page documents the VPN features built in to iOS itself, not VPNs provided by apps.</text></comment>
<story><title>VPNs on iOS are a scam</title><url>https://www.michaelhorowitz.com/VPNs.on.iOS.are.scam.php</url></story><parent_chain><item><author>kogir</author><text>I think Apple is transparent about Always on VPN (blocking traffic except over the tunnel) requiring provisioning using MDM tools. Apple Configurator is free and allows anyone to set this up.&lt;p&gt;Any other VPN is just best effort.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;support.apple.com&amp;#x2F;guide&amp;#x2F;deployment&amp;#x2F;vpn-overview-depae3d361d0&amp;#x2F;web&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;support.apple.com&amp;#x2F;guide&amp;#x2F;deployment&amp;#x2F;vpn-overview-depa...&lt;/a&gt;</text></item></parent_chain><comment><author>xoa</author><text>I hope Wireguard makes it into iOS&amp;#x2F;macOS at some point. Still early days relative to other protocols of course but it&amp;#x27;s so much simpler and more reliable (even beyond the security benefits). I use it extensively on both platforms for access to my own networks and services nowadays.</text></comment>