Quick Links
People using a VPN on iPhones and iPads are not as secure as they think.
From there, you connect to the site you want, in this case, our website’s server.
In short,a VPNreroutes your connection.
mizar_21984/Shutterstock.com
However, they can be considered identical for the sake of these tests.
When a VPN does its job, all the water being poured through comes out on the other side.
Since it’s encrypted, the leaked data is also not at particular risk, thankfully.
However, that doesn’t mean it’s not a pretty serious flaw.
As Horowitz found out through further testing, Apple has not fixed it in any iteration of iOS since.
This seems odd, especially as the leak is proven beyond a doubt.
Some of the more popular protocols apparently won’t work with this flag, including OpenVPN and WireGuard.
It’s unclear if Apple allows this on iOS.
Other Issues
All this is pretty bad, but this may not be the end of it.
Horowitz is expecting even more iOS issues to arise from further testing.
In these cases, it appears developers can choose to have their iOS apps circumvent the VPN tunnel.
