Security — OxeraVPN Blog

← All articles

40 articles in the Security category.

• What Is VPN Port Forwarding — Use Cases & Risks
  Port forwarding lets services reach you through a VPN. Here's when you actually need it, when you don't, and the security risks.
• What Is Multi-Hop VPN and When to Use It
  Multi-hop chains your traffic through 2+ VPN servers. Here's when it's worth the speed cost — especially under the GFW.
• SOCKS5 vs HTTPS Proxy in China — Which to Use When
  SOCKS5 and HTTPS proxies behave differently under DPI in China. Here's which proxy to pick for which app and use case.
• VPN vs Proxy vs Tor — A Plain-English 2026 Comparison
  VPN, proxy, and Tor solve different problems. Here's a clear, no-jargon breakdown for users in censored regions in 2026.
• Smart DNS vs VPN — Which Should You Use for Streaming?
  Smart DNS is faster than VPN for streaming, but offers no privacy. Here's the honest comparison and the best use case for each.
• Are Free Proxies Safe? — The Honest 2026 Truth
  Free proxies are everywhere but most steal your data, inject ads, or sell your bandwidth. Here's the truth about free proxy lists.
• VPN Protocol Overhead Explained — Why Your Speeds Drop
  Every VPN protocol adds overhead bytes. Here's how to minimize it and why protocol choice can recover 30% of your bandwidth.
• DNS Rebinding Attacks Explained — How VPNs Help
  DNS rebinding can pwn your home network from a malicious website. Here's how the attack works and how a good VPN helps stop it.
• HTTP/3 (QUIC) in China — Why the GFW Hates It
  HTTP/3 changes how the GFW sees your traffic — sometimes for the better, sometimes worse. Here's the technical breakdown.
• Are VPN Browser Extensions Real VPNs? — The 2026 Truth
  Free VPN browser extensions are usually just proxies, not VPNs. Here's exactly what they protect, what they don't, and when to avoid.
• What Is a DNS Leak and How to Stop It in China
  Even with a VPN, DNS requests can leak your real location to Chinese authorities. Here's how to detect and prevent DNS leaks for good.
• Anonymous Payment for VPNs in China — 2026 Guide
  UnionPay leaks identity, Alipay/WeChat are tracked. Here's the 2026 guide to crypto, gift cards and prepaid cards for VPN purchases from China.
• Anti-Tracking Browser Extensions for China Users — 2026
  uBlock Origin, Privacy Badger, Decentraleyes — most extensions install fine but rule lists are slow to update from China. Here's the 2026 setup.
• DNS-over-TLS in China — 2026 Setup and Survival
  DoT (port 853) is widely blocked in China. Here's the 2026 setup with fallbacks via stubby, AdGuardHome and stunnel.
• What Is WebRTC Leak Protection and Why You Need It
  WebRTC can expose your real IP even through a VPN. Here's how WebRTC leaks happen and the only reliable way to block them.
• Encrypted Email in China — 2026 ProtonMail vs Tutanota vs Mailfence
  Most encrypted email providers are blocked from mainland China. Here's the 2026 comparison covering reachability, app reliability and key handling.
• Signal vs Telegram in China — 2026 Security Comparison
  Signal and Telegram have very different threat models. Here's the 2026 comparison covering metadata, blocking patterns and operational security in China.
• Combining 2FA and VPN in China — 2026 Security Guide
  Authenticator apps, SMS and hardware keys all have different reliability in China. Here's the 2026 stack for 2FA + VPN that actually works.
• Secure DNS Providers Compared — 2026 China-Friendly Edition
  Cloudflare 1.1.1.1, Quad9, NextDNS, AdGuard and ControlD all behave differently in China. Here's the 2026 head-to-head for privacy and reachability.
• Browser Fingerprinting Explained — Why a VPN Isn't Enough
  Even with a VPN your browser leaves a unique fingerprint. Here's how fingerprinting works and what you can do to stop it.
• MAC Address Spoofing on Chinese Networks — 2026 Privacy Guide
  Some Chinese hotels and ISPs log MAC addresses for compliance. Here's the 2026 spoofing setup for Windows, macOS, Linux, iOS and Android.
• Best Password Manager for China in 2026 — Bitwarden, 1Password & More
  Many password managers are slow or partially blocked in China. Here's a tested ranking of the ones that actually work in 2026.
• End-to-End Encryption Explained — What It Means for You
  Signal, WhatsApp, and iMessage all advertise end-to-end encryption. Here's what it actually means and what it doesn't protect against.
• Tor vs VPN in China — Which Is Safer in 2026?
  Tor is blocked in China but not impossible. VPN with stealth protocols is more practical. Here's the full comparison for China users.
• What Is Double VPN and Do You Need It?
  Double VPN routes traffic through two servers for extra encryption — but at a heavy speed cost. Here's when it's worth it and when it's not.
• What Is TLS Fingerprinting and How the GFW Uses It
  Since 2024 China's GFW has used TLS fingerprinting to spot VPN traffic. Here's exactly how it works and how Reality protocol defeats it.
• AES-256 Encryption Explained — How VPNs Keep You Safe
  Every VPN promises 'military-grade AES-256 encryption.' Here's what that actually means, why it matters, and how it works under the hood.
• IPv6 Leaks in China — The Hidden Privacy Threat
  China deployed IPv6 nationwide. If your VPN only handles IPv4, your real IP may still be exposed. Here's how to test and fix it.
• What Is Deep Packet Inspection (DPI)? — Plain English Guide
  DPI is the foundation of every modern censorship system. Here's how it works in plain English and why it matters for your VPN choice.
• Public WiFi in China — How to Stay Safe in Cafés and Airports
  Free WiFi at Starbucks, airports, and hotels in China is monitored. Here's how to use public WiFi without exposing your data.
• Obfuscation Protocols Explained — Stealth, Cloak, and Reality
  Obfuscation makes VPN traffic look like ordinary HTTPS or video. Here's how Stealth, Cloak, and Reality compare for the Great Firewall.
• Identity Theft Prevention for Expats in China — 2026 Guide
  Living abroad makes you a prime identity-theft target. This guide covers VPN, password managers, alerts, and the steps that actually matter.
• 10 Secure Browsing Tips for China — Protect Your Privacy in 2026
  Living in China requires a different threat model. Ten practical browsing rules that drastically reduce your tracking and risk exposure.
• Perfect Forward Secrecy Explained — Why Every VPN Needs It
  If a VPN's master key leaks tomorrow, can attackers decrypt last year's traffic? PFS prevents that. Here's how it works.
• VPN 'No-Log' Policies — What They Actually Mean in 2026
  Every VPN claims 'no logs.' Most still keep something. Here's the honest breakdown of what 'no log' really means and how to verify it.
• RSA vs ECC Encryption in VPNs — What Your Provider Should Use
  Older VPNs use 2048-bit RSA. Modern VPNs use elliptic-curve cryptography. Here's why ECC is faster, smaller, and more secure.
• Quantum-Resistant VPN in 2026 — Are We Ready Yet?
  Quantum computers will break RSA and ECC. Here's where post-quantum VPN protocols stand in 2026 and what to do today.
• VPN Audit Reports Explained — How to Read Them
  PwC, Deloitte, Cure53 — third-party VPN audits matter, but only if you know what to look for. Here's how to read a VPN audit report.
• IPv4 Exhaustion and What It Means for Your VPN
  The world is running out of IPv4 addresses. Here's how that affects VPN providers, server farms, and your real privacy in 2026.
• DNS-over-HTTPS (DoH) in China — Setup and Pitfalls
  DoH encrypts DNS lookups so the GFW can't poison them. Here's how to enable DoH on browsers, routers, and phones for use in China.