From dcdbbbef7502b43f6239495474657112fea1fa39 Mon Sep 17 00:00:00 2001
From: Peter Easton
@@ -433,6 +439,24 @@
SNI, so encrypted DNS is not yet accomplishing much. It's a forward looking feature
that will become more useful in the future. Using it is recommended, but it's not an
alternative to using Tor or a VPN.
GrapheneOS has built-in VPN support included in the operating system. Orbot, OpenVPN + for Android, the userspace implementation of WireGuard, and the Private Internet Access + VPN app have all been tested and reported working. VPNs can be configured under + Settings -> Network & Internet -> Advanced -> VPN. + +
There is an "Always-On VPN" toggle which forces connections to only use the + configured VPN. This will prevent apps from falling back to an unsecured connection and + leaking data outside the VPN in the event the connection to it is lost.
+