Indonesia's Content Filtering, and the Separate Question of the Network You're On

Indonesia has run a national content-filtering programme, known publicly as Internet Positif, for more than a decade. It is administered through the communications ministry and it works by category rather than case by case: lists of domains in categories such as gambling, pornography and piracy are passed to internet providers, and a provider returns a notice page in place of the site. How completely any given provider applies a list varies, which is why people in the same city sometimes have different experiences of the same address.

That is one subject, and it is a public one — what belongs on a list, who decides, and what recourse exists are questions Indonesian digital-rights organisations have argued in the open for years. This article is about a second and much less discussed subject: what the network you happen to be sitting on can see about you, entirely separately from whether anything you do is filtered.

What an Open Network Actually Sees

Join the Wi-Fi at a coffee shop in Jakarta, a mall in Surabaya or a co-working floor in Canggu and your device shares a local segment with every other device on it. The good news is that this is far better than it used to be. Almost every serious site and app now uses HTTPS, so the contents of what you send — the message, the document, the password — are encrypted between you and the server.

What HTTPS does not hide is where you went. As your device looks up each site, the name is visible to the network. So is the size of what you exchange and the timing of it. For casual browsing that may be of no consequence to you. For a freelancer working on a client's files from a café, or an employee signing into a company system from a shared space, the running list of which services you use, when, and how heavily is a fairly complete picture of your work — and it is readable without anyone breaking anything.

What Encryption Changes

A VPN puts all of that inside one encrypted tunnel between your device and a server you pick. The local network sees a single encrypted connection to a single address and nothing about what is in it. Site names, browsing patterns and the services you use stop being legible to the router, the operator, or the person two tables over.

The limits are worth stating as plainly as the benefit:

• It protects traffic in transit. It does nothing about a compromised phone, a phishing page you type your password into, or an app that leaks data by design.
• It does not make you anonymous. It moves the trust rather than removing it — your provider stops seeing your traffic and the VPN operator's handling of it becomes the thing that matters, which is why the operator's logging policy is the claim to check.
• It does not change what is permitted. A VPN is a privacy tool, not a legal one, and nothing about encrypting a connection alters the rules that apply to you.

Doft VPN

Doft VPN gives you every server location free, with no paywalled regions. It keeps no logs of your activity. It uses modern, well-reviewed cryptography and connects in one tap on Android and iOS; premium adds higher speeds and raises the data allowance, but the privacy features are free, because a security tool that only protects people who pay is not much of a security tool.

Use it for what it is genuinely good for: making the network you happen to be on stop being a party to your work.