A US senator is requesting the National Security Agency to provide clear guidance on which Virtual Private Networks (VPNs) offer adequate protection from foreign adversaries. While US agencies have previously recommended the use of VPNs, specific recommendations on the best services have been lacking.

VPNs encrypt internet traffic, ensuring that only the intended recipient can read the data. However, the encryption sometimes ends at a single server, leaving data vulnerable to snooping. Additionally, certain metadata, such as timestamps, may be unencrypted and could be exploited by nation-states for intelligence gathering.

Senator Ron Wyden (D-Ore.) is urging the NSA to address these nuances. His letter to General Joshua Rudd, the NSA director, seeks specific recommendations on the architecture of VPN services, including the use of single-hop and multi-hop configurations, as well as techniques like random delays and cryptographic padding to thwart timing attacks.

The senator’s request for detailed guidance on specific services such as Apple Private Relay, Nym, and Tor highlights the complexities involved in securing digital communications. The lack of clear, technical advice in this area underscores the ongoing challenges in balancing privacy and security in the digital age.