Opera Software was released last week a developer version that calls it Browser VPN or simply VPN depending on where you download the program from tourin the latest version of the browser.
The VPN Browser can be activated in Opera very simply from the browser settings, and as reported, the company uses encryption that improves both privacy and security while using the browser.
But a detailed analysis of the VPN used by Opera revealed that the VPN is not a VPN that protects it all movement of a device on the internet device, but a proxy.
When you enable VPN in Opera, the following occur:
The Opper browser connects to the SurfEasy API to obtain the credentials they need and the IP addresses (SurfEasy is a company of Opéra).
The browser sends requests to the proxy with permission request headers to the proxy whenever web pages are loaded or services in the browser. These headers include the device ID and device password.
This information can be "captured" and used on different systems, or even other non-Opera programs, as it contains the proxy IP address, username and password.
The connection itself is secure, as HTTPS is used even if the web pages do not use HTTPS. The hostname is searched remotely on the proxy server, which means that there is no leakage of the hostnames, as well as when the "VPN" is used.
What does all this mean?
OPpera's VPN is not a real VPN but an HTTP proxy. Opera's VPN also uses a device ID that connects to the device you are using.
It should be noted here that the device ID used by the "VPN" is the same ID that Opera has been using for a long time. You can read about this - Privacy in your browser.
The company says:
“The Opera browser installation contains a unique identifier that is not linked to the user's identity. This unique ID is required for its automatic updates software and installed extensions. Data that is about features (not web pages) is used in the Opera browser and collected for the purpose of improving the software and services. The software also creates a unique identifier associated with your computer. This unique identifier is used for the sole purpose of measuring marketing campaigns and distribution partners.”
Opera said it has a strict data non-logging policy for VPN / proxy.
Hopefully, Opera plans to fix all of the above in future releases. She would be more than welcome change of the proxy to a real VPN until the version reaches the stable channel.
