Some clarification in another thread here: https://news.ycombinator.com/item?id=25113039 https://news.ycombinator.com/item?id=25113039 The VPN leak is only aro

Some clarification in another thread here: https://news.ycombinator.com/item?id=25113039 https://news.ycombinator.com/item?id=25113039 The VPN leak is only around per-application VPNs and filters, which is the mechanism used by firewalls like Little Snitch and LuLu. These can not be applied to Apple's apps. System-wide VPNs thankfully don't have the same problem. Can anyone weigh in on why Apple would prevent this? It's not as though redirecting the traffic from Apple's software will let you impersonate Apple (unless you've also been able to load your own fake certificates, in which case the client is already hosed). At worst you can selectively block them, no? And you can do that anyway with a hosts file.