[kertis]

Among other features WireGuard has roaming mode, it's fantastic for mobile devices. Just try it, it's easy and quick!

[tw04]

In my experience the problem with roaming mode is it blocks the login page for wireless networks. IE: in a coffee shop. Maybe that's been fixed recently, but it was a giant PITA in the past.

[yencabulator]

You could run a portal login helper in a network namespace that doesn't go through the vpn. https://www.chromium.org/chromium-os/chromiumos-design-docs/...

[kertis]

I suppose because of DNS servers. Shops give you own "correct" dns for showing you adds on any first request.

[djsumdog]

You can use iodine for those wi-fi hotspots that charge for access. It tunnels TCP-over-DNS

[place1]

I never even thought about using a DNS based tunnel for this problem. Amazing.