This security firm claims to have the right tool for your privacy, and it’s not a VPN
Could Multi-Party Relays (MPRs) really replace your VPN app?
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
If you’re looking to boost your online privacy, it’s likely you’ve read that using one of thebest VPNservices is the best way to go about it. We would know – at TechRadar we’re always writing aboutVPNs, and recommend our favorite providers.
However, security firm INVISV is arguing that a VPN isn’t the right tool from a privacy and security standpoint.
This is why it has developed itsINVISV Relaysoftware that, it claims, is a better option for protecting users' data.
But, how do multi-party relays (MPRs) work in practice? And, can it really fully replace your virtual private network?
The problem around trust
“We’re challenging something basic in that space: that to protect our privacy we need to hand over our data to some specific company (like a VPN provider) who will supposedly protect us,” said INVISV co-founder Barath Raghavan.
According to Raghavan and his business partner Paul Schmitt, the issue lies on the software infrastructure that implies a degree of trust between users and software providers. The same concept also applies to companies behind thebest antivirussoftware orsecure email services, for example.
They also believe thatindependent VPN audits- a growing practice across the privacy sector - cannot fully address this security flaw either, as these still rely on a certain degree of trust from users. Whereas, according to INVISV, it’s better to put the protections directly into the software architecture.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
“There’s so many of these kinds of third parties that they say ‘trust us, send us your data and we will fix your security or privacy problem,'” Raghavan told TechRadar. “This is not really the right design for privacy.”
How do MPRs work?
Available only on Android devices, INVISV Relay is an MPR, designed on the principle that none of the parties involved can see in full any user-linkable data. However, INVISV Relay certainly isn’t the first MPR around.Apple Private Relayis indeed a very similar tool available for iOS.
Both these apps are built on a privacy design formulated by US computer scientist David Chaum in the 1980s – something known as theDecoupling Principle.
Here, the data traffic travels across two separate servers run by two distinct organizations. Theoretically, none of the party involved can see the full string of information, meaning that it won’t be possible associate users’ identity with their activities.
Tor browser, for example, is built on the same premise – described as “onion routing”. However, being a free software and generally using three layer ofencryptionas a default, Tor lacks the level of performance that most mobile users might require.
Instagram’s ‘precise location’ tracking is nothing new, here’s how to turn it off>Are VPNs really safe? How to check your service’s security>Our pick of the most secure VPN providers around right now
“What we have done has been creating something that has the right privacy principle but is fast,” saidRaghavan, promising that INVISV Relay can run as fast as your normal browsing connection.
For doing so, the service uses one of thebest CDNnetworks around,Fastly, as it implements the encryption protocol known as IETF Masque that combinesTLS-encrypted HTTPS connections with reliable and fast performance. It’s also open-source, meaning that anyone can check out the network for vulnerabilities.
Your data will leave your device passing through a TLS-encrypted tunnel to reach the first server run by INVISV. As the company explained to us, this server will be able to see just a stream of encrypted data traveling from yourIP addressto the next hop, the one operated by Fastly.
At this point, Fastly will decrypt your data in transit but it will be able to see this as coming from the INVISV server instead of a specific user. It will then route your information to your final destination.
Can MPRs replace VPNs?
So, MPRs appear to have the potential to better secure your online data without the worry that the companies involved might store or leak your sensitive information.
However, there are still a wide range of use cases where opting for a VPN is the better bet.
First of all, both INVISV Relay andApplePrivate Relay areavailable for mobile devices onlyat the moment – Android and iOS, respectively. This means that a VPN is still the best solution tobrowse the web anonymouslyon your laptop or PC while enjoying fast connection speeds.
Also, a key limitation of any MPRs is that they arenot designed for those looking to change their IP address. So, if you want to bypass any kind of online restrictions – be it your school or workspace firewall or your government’s online censorship – you still need a good VPN to do so.
One of the most popular VPN uses isn’t even to do with security - it’s about streaming. By connecting to various servers around the world, VPN users can spoof their virtual location and access streaming content that’s unavailable or prohibitively expensive in their own region. Since MPRs don’t affect your virtual location, this is off the table.
“What we’re really trying to point out is that there’s just a different way to protect privacy that peopleshouldbe doing,” explains Raghavan. “We’re trying to provide something that’s practical for the average user, that will just improve their privacy without the need to rely on any promises from anybody.”
So, for those simply looking to protect their browsing and decouple their identity from their browsing habits, an MPR is a good choice. However, if you’re looking for any of the other benefits traditionally offered by VPNs, an MPR can’t deliver.
Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life—wherever cybersecurity, markets and politics tangle up.She mainly writes news, interviews and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar Pro, TechRadar and Tom’s Guide. Got a story, tip-off or something tech-interesting to say? Reach out to chiara.castro@futurenet.com
3 reasons why PIA fell in our best VPN rankings
Is it still worth using Proton VPN Free?
How to turn off Meta AI
