Opera Software was released last week a developer version called Browser VPN or just VPN depending on where you download the browser to the latest version of the browser.
The VPN Browser can be activated in Opera very simply from the browser settings, and as reported, the company uses encryption that improves both privacy and security while using the browser.
However, a detailed analysis of the VPN that Opera uses revealed that VPN is not a VPN that protects all the traffic of an internet device device, but a proxy.
When you enable VPN in Opera, the following occur:
The Opper browser connects to the SurfEasy API to obtain the credentials they need and the IP addresses (SurfEasy is a company of Opéra).
The browser sends requests to the proxy with license request headers in the proxy whenever web pages or services are loaded in the browser. These headers include the device ID and device password.
This information can be "captured" and used on different systems, or even other non-Opera programs, as it contains the proxy IP address, username and password.
The connection itself is secure, as HTTPS is used even if the web pages do not use HTTPS. The hostname is searched remotely on the proxy server, which means that there is no leakage of the hostnames, as well as when the "VPN" is used.
What does all this mean?
OPpera's VPN is not a real VPN but an HTTP proxy. Opera's VPN also uses a device ID that connects to the device you are using.
It should be noted here that the device ID used by the "VPN" is the same ID that Opera has been using for a long time. You can read about this - Privacy in your browser.
The company says:
"Opera browser installation contains a unique identifier that is not associated with the user ID. This unique ID is required for automatic software updates and installed extensions. Feature data (not web pages) is used in the Opera browser and is collected for the purpose of improving software and services. The software also generates a unique ID associated with your computer. This unique identifier is used for the sole purpose of measuring marketing campaigns and distribution partners. ”
Opera said it has a strict data non-logging policy for VPN / proxy.
Let's hope that Opera plans to fix all of this in future releases. It would be more than welcome to change the proxy to real VPN until the version reaches the fixed channel.