Hier mal eine Umfrage zu VPN-Anbietern, die ihr nutzt. Erstmal die populärsten reingenommen.
Druckbare Version
Hier mal eine Umfrage zu VPN-Anbietern, die ihr nutzt. Erstmal die populärsten reingenommen.
die Seite bestvpn.com hat bereits Ende Mail eine Tabelle mit den (ihrer Ansicht nach) 5 sichersten VPN Anbietern veröffentlicht. Die Bewertungskriterien waren folgende
Ich verwende schon lange den Sieger dieses Test und bin in jeder Hinsicht zufriedenZitat:
Important Security Considerations when choosing a secure VPN provider
Location
One of the most shocking things to discover when researching VPNs is how many are located in countries that legally oblige them to be fundamentally insecure when it comes to customers’ data, and which makes the notion that they are providing any form of real privacy frankly laughable.
The United States, although it has no mandatory data retention laws, suffers from an incredibly belligerent and powerful anti-piracy lobby, to the extent that most US VPN providers keep usage logs, which they will quite happily turn over to copyright enforcement lawyers at the drop of a hat. On top of this, of course, there is the blanket spying undertaken by the NSA, he scope which is frankly staggering, and beggar’s disbelief. It is safe to say, we feel, that no US VPN service can be considered secure when it comes to the NSA.
While the EU used to have the Data Retention Directive, as of April 2014 it was deemed invalid by top EU courts. This has lead to some countries implementing extra ‘privacy protecting’ security measures – or, to put it bluntly, a legal way for secret services to track its residents.
Keeping logs
The most vital shield a VPN provider has for securely maintaining their customers’ privacy is a commitment to keeping no logs. As we noted above, there are only a limited number of countries where it is legally possible for a provider to do this, and many providers, even when not forced to do so by law (such as most US providers) keep logs anyway.
Despite many providers’ assurances that they will resist attempts to force them to hand logs over to the authorities if logs exist then they can be handed over. It is only by having no logs to hand over, that a VPN company can genuinely assure its customers that they never will be.
One thing to be careful of is that many VPN providers claim to keep no logs on the basis that they keep no usage logs (also known as traffic logs), and, therefore, keep no logs of what you get up to on the internet. They do however often keep records such as account details and connection logs (recording things such as the time when you connect and disconnect, IP address connected from and suchlike.). These are usually kept ‘for troubleshooting purposes’, but can still amount to quite a lot of potentially damaging metadata in the wrong hands.
Bitcoins
A very good indicator of a VPN provider’s commitment to privacy is whether they accept payment in Bitcoins. If they do, then it means that they are willing to accept anonymous payment. Although they can still trace you through your IP address, this means one less important way of identifying you. Even if you are not concerned with paying anonymously, it is a hallmark of a good VPN provider that it accepts Bitcoin payments.
Encryption
In addition to policies designed to ensure the security of customers’ privacy, at the heart of VPN lays encryption. It has only recently come to light the extent to which the NSA has worked to weaken and subvert international encryption standards, and no-one really knows what the NSA is capable of decrypting. What is known is that the NSA has made great strides in cracking commonly used VPN encryption protocols such as PPTP and L2TP.
To the best of anyone’s knowledge, however, OpenVPN remains a secure protocol, although anyone serious about security will now likely want to see it beefed up to at least a 256-bit cipher. While it is possible that the NSA may be able to break even such strong encryption, to do so would almost certainly be a time consuming and arduous task for them, and therefore it is unlikely to be problem unless you are specifically targeted by the NSA (and even then it will generally be easier to co-opt your VPN company, or perform a man-in-the-middle style attack on your communications…)
Therefore, what we look for in a secure VPN is strong 256-bit OpenVPN encryption. By far the most popular cypher among security conscious VPNs (and is used by all services recommended here) is Advanced Encryption Standard (AES). Generally considered highly secure, it is the cypher used by the US government for ‘sensitive’ data, and has consequently enjoyed a good reputation, although this has been somewhat tarnished of late thanks to the NSA scandal. As a result of this, there has been much talk of moving away from any cyphers associated with NIST, the US government, or the US at all, but despite a great deal of talk, we have yet to see much in the way of concrete action in this regard.
VPN client
Some VPN providers supply excellent custom VPN clients that add all sorts of funky features, such as internet kill switches, DNS leak protection, port forwarding and server load information. These features are great, and generally help to impress us with a service, but if NSA tampering worries you then you should try to stick with free open source software (FOSS) that can be independently peer-reviewed and audited for malicious code (such as the regular vanilla OpenVPN client), rather than any kind of closed proprietary software.
Shared IP addresses
Any secure VPN company worth its salt should use shared IP’s, where many customers access the internet using the same shared IP address. While not 100% foolproof, this makes identifying an individual extremely difficult. All the recommended providers above make use of shared IPs.
Secure VPN Conclusion
Given the large number of VPN providers around, it can be somewhat disconcerting to find how many do not take security seriously. All those above do, with AirVPN (closely followed by Perfect Privacy) clearly deserving top place.