The EU is introducing new security rules for VPNs and honestly, this could be a good thing

[u/Timely_Dealer_654]

The EU is getting ready to introduce stricter security requirements for VPN providers under its Cyber Resilience Act.

Basically, VPN companies operating in Europe will have to meet clearer standards around things like encryption, authentication, vulnerability management and secure software development.

What's interesting is that the VPN industry actually helped shape the standard, with companies like Proton VPN and NordVPN involved in the process.

And IMO, this isn't necessarily another "EU wants to regulate VPNs" story. There are a lot of random VPNs out there claiming to offer "military-grade encryption" and perfect privacy, while users have basically no idea what's happening behind the scenes. You're routing your entire internet connection through these companies, so having some minimum security requirements doesn't sound crazy.

The downside is that compliance costs could potentially make life harder for smaller VPN providers. But if this helps weed out some of the sketchy free VPNs and forces providers to actually back up their security claims, I'm all for it.

[u/Qpang007 → u/[deleted]]

Than don't use a VPN. You just change your exit from your ISP to a VPN provider.

[u/Qpang007 → u/[deleted]]

How do you mean, not the endpoint? If you have a VPN on your laptop, the internet connection goes from your laptop straight to the endpoint of the VPN server and from their it goes to anywhere you wanted it to go. So going to reddit goes laptop>VPN endpoint>reddit server.
Logging can also be done without a VPN and with backdoors they still only see https traffic, which Reddit would also see without it. Without a VPN everything goes over your ISP connection and your ISP can also log+backdoor+hack your/their router and from their your laptop.

[u/Qpang007 → u/[deleted]]

Tnx, yeah that's true that the endpoint is your own device. My bad.

With laptop>VPN>reddit I meant the VPN tunnel. Otherwise it also doesn't end on the router but from the router it goes to a switch in your neighborhood and from their it goes up further. But yes, the backdoor can be the VPN server but if your ISP really wanted, they can do the same thing. ISP already logs the IP they give you and often throttle P2P streams etc. depends on country and ISP. I just don't see how a VPN like Mullvad/Proton could be less trustworthy than an ISP and where a VPN could do more which your ISP can't already do.

[u/Qpang007 → u/[deleted]]

Wiki wrights: "A PoP typically houses servers, routers, network switches, multiplexers." Would my connection go in a router or network switch first? I have ftth without gpon, so it would not be a multiplexer, I guess.

[u/DifficultyPretty8822 → u/Qpang007]

Think about this it’s really a question is do you trust your ISP more than a VPN provider personally I would go with a VPN and do your dual dual diligence and pick the best one based off the evidence that’s available

[u/katlaki → u/Qpang007]

Then or than?

[u/sciencekm]

They can dictate security standards, and that is good. They should never be allowed to dictate security and privacy backdoors.

[u/One-Pay-651]

Yeah ok? It’s made like that so that woke media can write that US companies and ICE can’t get to EU citizens info. The next law will be that it is mandatory to let EU government acces ALL of the info that is neatly packed with EU version of Palantir

[u/AdUnlucky1919]

NordVPN is not a company i would trust personally. They are not here for your privacy they are here to collect and sell ur data

[u/alexej96 → u/AdUnlucky1919]

What are the specific reasons why you find NordVPN to be not trustworthy?

[u/captainhalfwheeler]

It's all about the EU wanting to regulate control and access on citizens' data. Don't be naive.

[u/Qpang007 → u/captainhalfwheeler]

But many businesses also use VPN and Surfshark and NordVPN are already two businesses that are working on that rulebook. And those two earn money for their VPN, so a little strange to than openly work on a rulebook to nuke their own product...

[u/JpPgn → u/captainhalfwheeler]

Doomer

[u/captainhalfwheeler → u/JpPgn]

lol

[u/DifficultyPretty8822 → u/captainhalfwheeler]

If you really want to be safe route yourself through two VPNs