Internet Positif, Explained Without the Sales Pitch

Most articles about Internet Positif are written to sell something, and it shows. They open with a list of things you supposedly cannot reach, and close with a product that supposedly fixes it. Here is a more useful version, with the sales pitch taken out.

What the Programme Is

Internet Positif is a content-filtering programme administered through Indonesia's communications ministry and enforced by internet providers. It works on categories — broadly, gambling, pornography, and material classified as harmful under the ministry's own criteria — distributed as lists of domains that providers apply on their networks. When a filtered address is requested, the provider serves a notice page rather than the site.

Two honest observations about it. First, the mechanism is administrative rather than judicial, which is precisely the criticism Indonesian digital-rights groups have raised for years and continue to raise in public. Second, application is uneven between providers, so what one network does is not proof of what another will do.

Note what that description does not include: a running list of named services. Those lists circulate constantly, they are often wrong, and they are stale within weeks. We are not going to publish one.

Where a VPN Actually Fits

On the network side, and only there. This is the part of the story that gets undersold precisely because it is unglamorous, so let us be specific about it.

Any shared network — the Wi-Fi at a warung kopi, a campus, an airport lounge, a kos with one router for the whole building — puts your device on a segment with strangers, under an operator you have never met. HTTPS has made this much safer than it once was; the contents of your messages, files and logins are encrypted between you and the site.

What HTTPS leaves in the open is the shape of your session: the name of every site your device looks up, how much data you move, and when. That is enough to reconstruct which bank you use, which employer's systems you log into, which health service you consulted last Tuesday. Nobody has to break anything to read it. It is simply visible.

A VPN wraps the whole of that in one encrypted tunnel to a server you choose, so the local network sees one connection to one address and nothing about its contents.

The Limits, Said Out Loud

• It protects traffic in transit. A compromised device, a convincing phishing page, or an app that ships your data off by design are all untouched by it.
• It does not make you anonymous. It relocates the trust: your provider stops seeing your traffic, and the VPN operator's handling of it becomes what matters. That is why the operator's logging policy is the claim to check.
• It does not change what is permitted. Encrypting a connection does not alter the rules that apply to you, and any product implying otherwise is not being straight with you.

Doft VPN

Doft VPN gives you every server location free, with no paywalled regions. It keeps no logs of your activity. It uses modern, well-reviewed cryptography, connects in one tap on Android and iOS, and premium adds higher speeds and raises the data allowance — but the privacy features are free, because a security tool that only protects people who pay is not much of a security tool.

That is the whole claim. It is a smaller claim than most, and it happens to be true.