Using a VPN everywhere including known identities
UnknownIdentity:
> Proton’s stealth feature for anti-censorship / obfuscation? I’m not in a country where this would be needed as such but in the future who knows.
For Public VPN providers, anti-censorship is a recent development, and an after-thought, if that makes sense.
Projects like Lantern & Psiphon and some of the other proxy apps (like Hiddify, Matsuri, Nekobox, SagerNet) supporting V2Ray / XRay / VLESS / Trojan / Cloak / etc are specifically built for censorship resistance & continually evolve strategies based on reports and in-field diagnosis.
UnknownIdentity:
> is there any specific settings you’d recommend
I block all but 7 apps on my Android. Then unblock the others only when I need them. I use certain apps (like Mail) in _Isolate_ mode and only let the Mail app connect to my mailserver and no where else. In _Isolate_ mode, Rethink blocks ALL connections except the ones allowlisted / whitelisted (kind of like inverting & blocking everything by default).
I also have _Block when device is locked_ , _Block newly installed apps_ , _Block when DNS is bypassed_ (but exempt Telegram by “Bypass Universal” for it from _Configure → Apps_), and _Block when source app is unknown_ turned ON from _Configure → Firewall → Universal firewall rules_.
In _Configure → DNS_ , I use “RDNS Privacy” with “ Max”.
In _Configure → Proxy_ , I use Proton, Amnezia, and Windscribe profiles. And always route Google-owned IPs via Proton’s US endpoints: RethinkDNS-Hack unter Android: Ausschließlich Google-Dienste über VPN leiten • Kuketz IT-Security Blog (in German).
I also have some vanity features like _Configure → DNS → Show website icon in DNS logs_ & _Configure → Settings → Show provider information_ turned ON (these 2 settings cost us money, so if you do find value, consider sponsoring the project; typically, if you use RDNS for a year + those 2 settings turned ON, you’re good if you chip with £1 in donation. We show an approximate £ amount depending on how long the Rethink app has been installed (not used, mind) when you tap on the `+` button on the homescreen wedged between the four dashboard tiles; this £ value is also shown in _About_ UI in the top card view just above a big “Sponsor” button).
I digress.
I’ve written some more on the GrapheneOS forums and on our subreddit
Also, this community guide (I haven’t vetted it nor have I been asked to review it) that gets shared often on our support channels.