Virtual Private Networks, Site Blocking, and Digital Security Governance in Indonesia
DOI:
https://doi.org/10.12345/jacodi.v1i02.75Keywords:
virtual private network, site blocking, network security, data protection, regulatory complianceAbstract
VPNs are used to protect communications over untrusted networks and to reach services inaccessible through a particular connection, but they also raise concerns about traffic visibility, privacy, and access to blocked content. This article analyzes VPN use in Indonesia through a technical-governance framework connecting network risks with applicable regulation. The study combines document analysis of Indonesian legal instruments and official regulatory materials with technical literature on VPN security, IPsec, and DNS privacy. It maps electronic-system and personal-data responsibilities to five risk areas: tunnel configuration, DNS/IPv6 leakage, provider-side logging, mobile-app supply-chain behavior, and fail-open connectivity. The analysis indicates that VPN technology must be assessed separately from conduct performed through it; legal consequences depend on the relevant act, content, provider role, and applicable legal elements. Prior empirical research has found serious weaknesses in some mobile VPN applications, but those findings cannot be generalized to every current service. The article provides a regulatory-control matrix and a repeatable technical checklist; it does not claim to test commercial VPN products. It concludes that risk-based verification and precise legal classification are preferable to unsupported claims of a blanket VPN-specific licensing requirement.
References
Republic of Indonesia, “Law No. 11 of 2008 concerning Electronic Information and Transactions,” State Gazette of the Republic of Indonesia, No. 58, 2008. Available: https://peraturan.bpk.go.id/Details/37589/uu-no-11-tahun-2008
Republic of Indonesia, “Law No. 19 of 2016 concerning Amendment to Law No. 11 of 2008 concerning Electronic Information and Transactions,” State Gazette of the Republic of Indonesia, No. 251, 2016.
Republic of Indonesia, “Law No. 1 of 2024 concerning the Second Amendment to Law No. 11 of 2008 concerning Electronic Information and Transactions,” State Gazette of the Republic of Indonesia, No. 1, 2024. Available: https://peraturan.bpk.go.id/Details/274494/uu-no-1-tahun-2024
Republic of Indonesia, “Government Regulation No. 71 of 2019 concerning the Operation of Electronic Systems and Transactions,” State Gazette of the Republic of Indonesia, No. 185, 2019. Available: https://peraturan.bpk.go.id/Details/122030/pp-no-71-tahun-2019
Ministry of Communication and Informatics of the Republic of Indonesia, “Ministerial Regulation No. 5 of 2020 concerning Private Electronic-System Operators,” State Bulletin of the Republic of Indonesia, No. 1376, 2020, as amended by Ministerial Regulation No. 10 of 2021. Available: https://jdih.komdigi.go.id/produk_hukum/view/id/759
Republic of Indonesia, “Law No. 27 of 2022 concerning Personal Data Protection,” State Gazette of the Republic of Indonesia, No. 196, 2022. Available: https://peraturan.bpk.go.id/Details/229798/uu-no-27-tahun-2022
Republic of Indonesia, “Law No. 44 of 2008 concerning Pornography,” State Gazette of the Republic of Indonesia, No. 181, 2008. Available: https://peraturan.bpk.go.id/Details/39740/uu-no-44-tahun-2008
Republic of Indonesia, “Law No. 1 of 2023 concerning the Criminal Code,” State Gazette of the Republic of Indonesia, No. 1, 2023. Effective 2 January 2026. Available: https://peraturan.bpk.go.id/Details/234935/uu-no-1-tahun-2023
M. Ikram, H. J. Asghar, M. A. Kaafar, A. Mahanti, and B. Singh, “An Analysis of the Privacy and Security Risks of Android VPN Permission-enabled Apps,” in Proc. 2016 ACM Internet Measurement Conference, Santa Monica, CA, USA, 2016, pp. 349–364, doi: 10.1145/2987443.2987471.
E. Barker, Q. Dang, S. Frankel, K. Scarfone, and P. Wouters, “Guide to IPsec VPNs,” NIST Special Publication 800-77 Rev. 1, National Institute of Standards and Technology, Gaithersburg, MD, 2020, doi: 10.6028/NIST.SP.800-77r1.
S. Kent and K. Seo, “Security Architecture for the Internet Protocol,” Internet Engineering Task Force, RFC 4301, Dec. 2005. Available: https://www.rfc-editor.org/rfc/rfc4301
P. Hoffman and P. McManus, “DNS Queries over HTTPS (DoH),” Internet Engineering Task Force, RFC 8484, Oct. 2018. Available: https://www.rfc-editor.org/rfc/rfc8484
C. Pascoe, S. Quinn, and K. Scarfone, “The NIST Cybersecurity Framework (CSF) 2.0,” NIST Cybersecurity White Paper 29, National Institute of Standards and Technology, Gaithersburg, MD, 2024, doi: 10.6028/NIST.CSWP.29.
M. I. Wahyudi and S. J. Sa'idu, “Artificial Intelligence Similarity Index Detection App as an Anti-Plagiarism Campaign Against Intellectual Property Crime,” Digital Muslim Review, 1(2), (2023): pp. 120-130.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Nisfu_Ruwaihan_Maulana19, Indra Maulana, Nisfu Ruwaihan Maulana, Nandana Firjatullah, Angga Febrian Nugroho
This work is licensed under a Creative Commons Attribution 4.0 International License.
- Attribution — You must give appropriate credit , provide a link to the license, and indicate if changes were made . You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use.
- No additional restrictions — You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.
