From 5e38994584aa9ec670da831ab9ee607c3397bd6b Mon Sep 17 00:00:00 2001 From: Daniel Nathan Gray Date: Fri, 29 Nov 2019 09:01:06 +0000 Subject: [PATCH 1/2] IPv6 badge for Mullvad (#1537) IPv6 badge for Mullvad Add IPv6 to Best Case for Technology --- _includes/sections/vpn.html | 2 ++ pages/providers/vpn.html | 1 + 2 files changed, 3 insertions(+) diff --git a/_includes/sections/vpn.html b/_includes/sections/vpn.html index 81a9b996..94860ea9 100644 --- a/_includes/sections/vpn.html +++ b/_includes/sections/vpn.html @@ -22,6 +22,8 @@

...Cure53 and Assured AB are happy with the results of the audit and the software leaves an overall positive impression. With security dedication of the in-house team at the Mullvad VPN compound, the testers have no doubts about the project being on the right track from a security standpoint.

+
IPv6 Support
+

Mullvad supports the future of networking IPv6. Their network allows users to access services hosted on IPv6 as opposed to other providers who block IPv6 connections.

Accepts Bitcoin

Mullvad in addition to accepting credit/debit cards and PayPal, accepts Bitcoin, Bitcoin Cash, and cash/local currency as anonymous forms of payment. They also accept Swish and bank wire transfers.

No Mobile Clients
diff --git a/pages/providers/vpn.html b/pages/providers/vpn.html index dca3bab3..55a8274c 100644 --- a/pages/providers/vpn.html +++ b/pages/providers/vpn.html @@ -62,6 +62,7 @@ description: "Find a no-logging VPN operator who isn't out to sell or read your
  • OpenVPN and WireGuard support.
  • Killswitch with highly configurable options (enable/disable on certain networks, on boot, etc.)
  • Easy-to-use mobile clients, especially open-source.
    • +
  • Supports IPv6. We expect that servers will allow incoming connections via IPv6 and allow users to access services hosted on IPv6 addresses.
    • From 475b0334800aa273cd382ee18d872d2e7fb61890 Mon Sep 17 00:00:00 2001 From: Daniel Nathan Gray Date: Fri, 29 Nov 2019 16:52:21 +0000 Subject: [PATCH 2/2] Addition of responsible marketing section (#1538) Addition of responsible marketing section with mention of self-hosting analytics --- pages/providers/vpn.html | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/pages/providers/vpn.html b/pages/providers/vpn.html index 55a8274c..79d3e6bd 100644 --- a/pages/providers/vpn.html +++ b/pages/providers/vpn.html @@ -125,6 +125,36 @@ description: "Find a no-logging VPN operator who isn't out to sell or read your +
    +

    Marketing

    +

    With the VPN providers we recommend we like to see responsible marketing.

    +
    +
    +

    Minimum to Qualify:

    +
      +
    • Must self host analytics (no Google Analytics etc). The provider's site must also comply with DNT (Do Not Track) for those users who want to opt-out.
      • +
    + +

    Must not have any marketing which is irresponsible:

    +
      +
    • Making guarantees of protecting anonymity 100%. When someone makes a claim that something is 100% it means there is no certainty for failure. We know users can quite easily deanonymize themselves in a number of ways, eg:
      • +
        +
      • Reusing personal information eg. (email accounts, unique pseudonyms etc) that they accessed without anonymity software (Tor, VPN etc)
        • +
      • Browser fingerprinting
        • +
      +
    • Claim that a single circuit VPN is "more anonymous" than Tor, which is a circuit of 3 or more hops that regularly changes.
      • +
    • Use responsible language, eg it is okay to say that a VPN is "disconnected" or "not connected", however claiming that a user is "exposed", "vulnerable" or "compromised" is needless use of alarming language that may be incorrect. For example the visiting user might be on another VPN provider's service or using Tor.
      • +
    +
    +
    +

    Best Case:

    +

    Responsible marketing that is both educational and useful to the consumer could include:

    + +
    +

    Additional Functionality

    While not strictly requirements, there are some factors we looked into when determining which providers to recommend. These include adblocking/tracker-blocking functionality, warrant canaries, multihop connections, excellent customer support, the number of allowed simultaneous connections, etc.