Re: The VPN condrum
"so I connect to my Corporate VPN and do stuff.
My Internet Point of presence is around 4000 miles away.
Ok GCHQ/NSA how do you get my browsing history?"
Unless you are connecting to your corporate VPN through your very own bit of copper/fibre and exchanging keys via another completely different channel they can't tap they could probably find somewhere along the trail of nodes to launch a man in the middle attack. If that's too hard/awkward they can lean on your corporation until they hand over the records (which will they be required to keep if they work in certain areas/jurisdictions - eg: finance).