summaryrefslogtreecommitdiff
path: root/static/features.html
diff options
context:
space:
mode:
Diffstat (limited to 'static/features.html')
-rw-r--r--static/features.html8
1 files changed, 5 insertions, 3 deletions
diff --git a/static/features.html b/static/features.html
index 05ff08f2..a43c86a4 100644
--- a/static/features.html
+++ b/static/features.html
@@ -1150,9 +1150,11 @@
without VPN" toggle enabled.</p>
<p>Android allows DNS queries from the system resolver to leak to the network
- provided DNS servers when a VPN app goes down due to a race condition. This is
- fully prevented by GrapheneOS through extending the leak blocking to this part
- of the system resolver.</p>
+ provided DNS servers when a VPN app goes down due to a race condition. It also
+ similarly allows connections to the VPN DNS servers to happen outside of the VPN
+ tunnel. Both of these are fully prevented by GrapheneOS through extending the
+ leak blocking to this part of the system resolver, fully preventing unicast DNS
+ leaks.</p>
<p>Android allows processes including apps to bypass the VPN entirely whether
it's up or down by sending multicast packets either directly or by causing the