US Patent 11283763 On-device dynamic safe browsing

In an example, there is disclosed a computing apparatus, including: a hardware platform comprising a processor and a memory; software to access a network or internet resource according to a domain name; a network stack to provide network or internet access; and a virtual private network (VPN), configured to locally intercept a domain name-based access request, query a domain policy repository to determine whether the domain name should be blocked, and to query an external domain name system (DNS) server for an internet protocol (IP) address for the domain name and pass the request through the network stack if the domain name should not be blocked.