BD VPN capabilities - secure core?

Question

Hi All….and thanks for your time and knowledge/expertise in pondering my question.

The question is a simple one.  BD seems to be pushing its VPN service hard at the moment and there seems much in it which attracts….but does BD VPN afford secure-core capability?

Thanks.

Dave

Scott · Answer

Yes, I do. You posted a better breakdown and more informative post.

So with that information, do you switch to Proton, or continue to use Bitdefender's VPN? Which technology gives the greatest peace of mind, and would be needed for daily use?

edit: I also think there is marketing involved, the fear factor of "what if" scenarios "if you're not using our VPN…." (they are not an AV company with those offerings, they need to generate income$$). Granted, the technology and infrastructure may be there, but how often would, does this happen, and what are we really using the VPN for and doing, or are "afraid" of?

"Therefore, even if an attacker monitors our servers in the US, they would only be able to follow the traffic back to the edge of our Secure Core network, thus making it far more difficult to discover the true IP address and location of Proton VPN users".

From  this link:

Secure Core is useful for high-risk users like whistleblowers, activists, political dissidents, lawyers, medical professionals, and more. However, be prepared for slower speeds due to double encryption and the extra distance your data needs to travel.

Everyday users most likely won’t need Secure Core, as the added security isn’t worth the noticeable speed drop.

HOW · Answer

Hi Scott,

Always grateful for your time and your understanding of the issues this Luddite brings to the Community.

In this, as with most things "IT" I require to invest time scouring sage sites and I think that the easiest statement of the differences between secure-core and double-hop informed me that double-hop….

"….provides layered encryption and splits information so one server sees your IP but not your destination, while the other sees the destination but not your IP….".

while secure-core….

"….differs from standard double hop in its server selection logic: it routes traffic through a hardened server in a privacy-friendly jurisdiction (like Switzerland or Sweden) first, before exiting to the final destination. This specific setup is designed to protect users from network surveillance and physical server seizures by ensuring the entry point is in a jurisdiction with strong legal protections….".

It summarises the comparison as, "…. Secure Core is a specialized variant focused on legal and physical security, whereas Double Hop is a broader feature often focused on general anonymity and IP concealment….".

To this IT idiot, it seems that both options afford highest levels of security/privacy but secure-core delivers that with the payer of strongest available legal protections through "privacy-friendly jurisdictions".

I therefor arrive at an understanding that double-hop, as you put it, "essentially accomplishes the same thing", as secure-core in regard to security/privacy, with secure-core's main difference being that it brings the legal protections of routing through "privacy-friendly jurisdictions". Would you concur?

Thanks.

Dave

Scott · Answer

Hi Dave :)

My first thought is the Bitdefender VPN creates a secure, encrypted VPN tunnel connecting to the web. The Bitdefender security app creates the secure browsing, phishing, and malicious site protection, and the device protection itself, real time scanning etc.

As far as secure-core capability like Proton advertises, Bitdefender VPN Double Hop essentially accomplishes the same thing.

https://www.bitdefender.com/consumer/support/answer/94033/

Or, like Nord who has "malware protection", Threat Protection Pro, as they are not an AV company and are trying to compete with those AV companies in that way.

@Alexandru_BD or others, may have some follow-up thoughts and insights as well. And if I missed the mark on what you're wondering about, please let us know :)