-2

According the customer service, it is a feature. However, I would like to understand why Android cannot separate Vpn traffic from real monitoring of attackers.

Fig. 1 Text Network may be monitored on the screen

enter image description here

OS: Oxygen OS 3.1
Phone: One plus 2

4
  • It's really unclear what you're asking here. What does the VPN have to do with monitoring of attackers? The notification is trying to tell you that whoever owns the VPN service can potentially see your network traffic (which is absolutely true). Sep 12, 2016 at 21:42
  • @eldarerathis It seems you understand my question. Please, see the body for the figure of the case. Sep 13, 2016 at 5:37
  • Android shows that for any VPN service you use, be it an external app or not. It's just a mandatory warning.
    – Andy Yan
    Sep 13, 2016 at 5:39
  • @AndyYan Yes. The point of this thread is to understand why. Why it cannot exclude your VPN from other uses? Sep 13, 2016 at 10:46

1 Answer 1

2

Background

This is a known feature which occurs when a Installing a private CA certificate for use with vpn or private web site encryption and or authentication or using self signed certificates, figuring in bug reports:

Common refrain of user complaints is that this warning is (amongst others)

  • Of no real use

  • Inconvenience to corporates

  • Impractical to expect users to get Google approved CA certificates for their uses

Google engineer has clarified in the first source (post 8) :

The "User" portion of the trusted credential store is non-system CA certificates that have been installed and are trusted by the browser and other things that use the system Trusted Certificate Store. This warning is about protecting the user of the device

(Emphasis supplied)

And provides an example of how user security can be breached


Coming to your question

Why Android cannot separate Vpn traffic from real monitoring of attackers.

Android cannot. Period.

Whether it is VPN or monitoring by attackers. As explained, it is only providing a warning that your network traffic can be monitored if you continue to use VPN / apps / self signed CA.

If you want the OS capability to deal with this kind of protection, then it seems to exist in the world's costliest Android phone - Solarin

3
  • Very nice phone! It has some nice features, existing only in a few models at the moment. I need to get one similar one day. How did you find the company? Is there any reviews about their phone in practice? Sep 13, 2016 at 12:32
  • 1
    Googling sirin labs + previews, you get much better results. It is very impressive phone. I would like to get more analysis about their security tweaks of Snapdragon 820 cpu and their power management - - I think the price does not matter, since it is only such a phone in the market, offering us a possibility to compare our own phones to it and develop better ones. - - I contacted them about those things. Sep 13, 2016 at 12:48
  • Was wondering, since there had been no revert
    – beeshyams
    Oct 25, 2016 at 15:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .