HTTPS is a fantastic way to keep people’s data secure, even if they have no idea that it’s working away in the background. However, despite its usefulness, there are still some cases where using a VPN alongside HTTPS is the best choice.
As such, let’s explore why you need both a VPN and HTTPS combined.
1. A VPN Protects Your HTTP Traffic (Somewhat)
HTTPS is great, but not every website uses it. To get an HTTPS connection, a webmaster needs to apply for a certificate and implement it onto their website. Some websites don’t need HTTPS, as they don’t handle sensitive information; as such, the webmaster will sometimes just stick with the unencrypted HTTP.
Using a VPN gives you more protection than just using HTTP. This is because when your computer sends data to a VPN, it does so through a secure tunnel that is safe from prying eyes. This gives your usually-unencrypted HTTP traffic safe passage as it travels through the tunnel.
For example, if you’re on public Wi-Fi and you turn on your VPN, anyone snooping on the network's router can’t see what you’re sending. And your ISP will be left in the dark as to what you’re doing.
However, this protection doesn't last the whole trip to the website. This is because the tunnel only sits between you and your VPN server. When your data leaves your VPN's servers, it'll lose the added protection, allowing people to peek at the traffic once again.
However, if you don't send any identifiable information over the HTTP connection, people spying on the connection can't tie the data to you. If they try to trace it back, their trail will go cold at the VPN's servers.
2. A VPN Covers All of Your Connections
While HTTPS is great, it only works if you’re connecting to an HTTPS-enabled website through a browser. When you connect to the internet using any other app, such as a game or a messaging service, these may not use encryption.
That’s not to say that other apps use no encryption at all. For example, WhatsApp uses end-to-end encryption to keep your messages safe. However, if you’re unsure if an app uses encryption for its communications, you can use a VPN to protect the data until it arrives at the VPN’s servers, much like HTTP traffic.
3. A VPN Protects You if You Can’t Use DNS-Over-HTTPS
HTTPS is great for keeping your traffic secure, but if you’re trying to cover your tracks, there is one flaw. When you type a URL into your browser’s address bar, it has to go to a DNS server to “translate” your URL into an IP address. And usually, this DNS request is unencrypted.
This means that someone on your network can watch these DNS requests and monitor which websites you visit. And given how ISPs usually provide the DNS server for you, they also get to see your browsing habits served up to them on a plate.
You can solve this by using DNS-over-HTTPS. This not only encrypts your DNS requests but sends them to a server that isn't owned by your ISP. That means you leave your internet service provider out of the equation entirely.
However, if you’re not sure if your browser supports DNS-over-HTTPS, or you’re using a device that doesn’t support it yet, you can use a VPN instead. Good VPN services will handle DNS requests for you so your ISP doesn't get to see them. And really good ones will also handle DNS requests with utmost care to prevent DNS leaks.
4. A VPN Hides Your IP Address
When you connect to a website, your browser gives it your IP address. This is because the website needs to know where to send its data to. It’s like sending a letter to someone; you need to give them your address so they know where to send their reply.
Even if you’re using HTTPS, your computer still has to give the website your current IP address. This is so the website you're visiting knows where to send its data to. This isn’t ideal if you want to keep your location a secret, but a VPN can fix this.
When you use a VPN, you pass all the traffic you want to send through its servers. The VPN service then passes the traffic onto the website you want to connect to. This is like sending a letter to a middleman, who sends it on to your recipient. They handle all incoming and outgoing mail without revealing where you live.
As such, when you use a VPN, websites can’t tell who you are or where you're from. If they try, they'll see the VPN's IP address and location, but not yours. As such, if you’re careful about the data you send, a snooper can’t tie the data you’re sending to you. And if you’re using a VPN that doesn’t keep logs, people can’t trace the VPN connection back to you.
5. A VPN Can Dodge Region Blocks
While we’re on the topic of hiding IP addresses, you can use VPNs to mask your home country. This is a fantastic way to get past region blocks on the internet.
Remember how VPNs work like a middle-man between you and the website? As it turns out, websites with region blocks look at your IP address to work out where you live. However, if you’re using a VPN as a middle-man, the website sees the IP address of your VPN, not you. This means the website believes you're visiting from the country that your VPN's server is located.
This feature means you can dodge around any regional restrictions on the internet. Want to watch a video online, but the copyright holder has blocked it in your country? Use a VPN server in the website’s country and trick it into thinking you’re a native resident. Does a game only allow residents of specific countries to play it? Pick a VPN server in that country and play your game.
This is a really handy service, and VPN providers know it. That’s why, when you boot up a VPN, you can select from a whole library of servers from different countries. When you connect to it, the websites you visit believe you’re from that server’s country.
HTTPS can’t do this, though. It may encrypt your traffic, but you can’t use HTTPS to mask the country you’re from.
Which VPN Services Are Best?
So we've made a pretty good case for using a VPN alongside HTTPS for secure web browsing. The question is, with so many VPN services out there, which ones are worth your time?
Fortunately, we've covered the topic extensively in prior articles. For example, you can check out the fastest VPN services so you can browse safely without sacrificing speed. And if money is an issue, you can read our guide on the best, totally free VPN services worth using, although we really recommend getting a paid one if you can.
VPNs and HTTPS: A Match Made in Heaven
If you really want to elevate your internet security game, using a VPN alongside HTTPS is a great way to do that. Where the HTTPS protocol fails, a VPN can pick up the slack and keep you safe online.
Unfortunately, there are a lot of myths surrounding VPNs and how they work. As such, be sure to read up about VPNs so you can identify the true facts from the fake ones.