Post #4235747

@dannyjpalmer@infosec.exchange I've often criticized the very large defense contractor I work for because 1) our laptops have to connect to an untrusted network _first_ , then onto the VPN, if the user cares. Then 2) with the VPN on, they don't confine _all_ traffic inside. Yep, DNS runs outside the VPN. My personal laptop, OTOH, connects to a travel router, which in turn connects to the hotel. So NAT plus the host firewall. And DoT for DNS, plus DNSSEC.