From 5e38994584aa9ec670da831ab9ee607c3397bd6b Mon Sep 17 00:00:00 2001 From: Daniel Nathan Gray Date: Fri, 29 Nov 2019 09:01:06 +0000 Subject: [PATCH 1/4] IPv6 badge for Mullvad (#1537) IPv6 badge for Mullvad Add IPv6 to Best Case for Technology --- _includes/sections/vpn.html | 2 ++ pages/providers/vpn.html | 1 + 2 files changed, 3 insertions(+) diff --git a/_includes/sections/vpn.html b/_includes/sections/vpn.html index 81a9b996..94860ea9 100644 --- a/_includes/sections/vpn.html +++ b/_includes/sections/vpn.html @@ -22,6 +22,8 @@

...Cure53 and Assured AB are happy with the results of the audit and the software leaves an overall positive impression. With security dedication of the in-house team at the Mullvad VPN compound, the testers have no doubts about the project being on the right track from a security standpoint.

+
IPv6 Support
+

Mullvad supports the future of networking IPv6. Their network allows users to access services hosted on IPv6 as opposed to other providers who block IPv6 connections.

Accepts Bitcoin

Mullvad in addition to accepting credit/debit cards and PayPal, accepts Bitcoin, Bitcoin Cash, and cash/local currency as anonymous forms of payment. They also accept Swish and bank wire transfers.

No Mobile Clients
diff --git a/pages/providers/vpn.html b/pages/providers/vpn.html index dca3bab3..55a8274c 100644 --- a/pages/providers/vpn.html +++ b/pages/providers/vpn.html @@ -62,6 +62,7 @@ description: "Find a no-logging VPN operator who isn't out to sell or read your
  • OpenVPN and WireGuard support.
  • Killswitch with highly configurable options (enable/disable on certain networks, on boot, etc.)
  • Easy-to-use mobile clients, especially open-source.
    • +
  • Supports IPv6. We expect that servers will allow incoming connections via IPv6 and allow users to access services hosted on IPv6 addresses.
    • -- 2.47.2 From 2d1dffd1c8f83a986f6c6e5c85e86bbdebacfd3f Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Fri, 29 Nov 2019 09:57:19 +0000 Subject: [PATCH 2/4] Addition of reponsible marketing section --- pages/providers/vpn.html | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/pages/providers/vpn.html b/pages/providers/vpn.html index dca3bab3..59c3301e 100644 --- a/pages/providers/vpn.html +++ b/pages/providers/vpn.html @@ -124,6 +124,32 @@ description: "Find a no-logging VPN operator who isn't out to sell or read your +
    +

    Marketing

    +

    With the VPN providers we recommend we like to see responsible marketing.

    +
    +
    +

    Minimum to Qualify:

    +

    Must not have any marketing which is irresponsible:

    +
      +
    • Making guarantees of protecting anonymity 100%. When someone makes a claim that something is 100% it means there is no certainty for failure. We know users can quite easily deanonymize themselves in a number of ways, eg:
      • +
        +
      • Reusing personal information eg. (email accounts, unique pseudonyms etc) that they accessed without anonymity software (Tor, VPN etc)
        • +
      • Browser fingerprinting
        • +
      +
    • Claim that a single circuit VPN is "more anonymous" than Tor, which is a circuit of 3 or more hops that regularly changes.
      • +
    • Use responsible language, eg it is okay to say that a VPN is "disconnected" or "not connected", however claiming that a user is "exposed", "vulnerable" or "compromised" is needless use of alarming language that may be incorrect. For example the visiting user might be on another VPN provider's service or using Tor.
      • +
    +
    +
    +

    Best Case:

    +

    Responsible marketing that is both educational and useful to the consumer could include:

    + +
    +

    Additional Functionality

    While not strictly requirements, there are some factors we looked into when determining which providers to recommend. These include adblocking/tracker-blocking functionality, warrant canaries, multihop connections, excellent customer support, the number of allowed simultaneous connections, etc.

    -- 2.47.2 From 7455f2d775e6221c3f6bb6e8c663feb25c99ea50 Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Fri, 29 Nov 2019 11:17:31 +0000 Subject: [PATCH 3/4] Addition of self-hosting analytics --- pages/providers/vpn.html | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/pages/providers/vpn.html b/pages/providers/vpn.html index 59c3301e..c78c42c9 100644 --- a/pages/providers/vpn.html +++ b/pages/providers/vpn.html @@ -130,6 +130,10 @@ description: "Find a no-logging VPN operator who isn't out to sell or read your

    Minimum to Qualify:

    +
      +
    • Must self host analytics (no Google Analytics etc). Options like Matomo are perfect for this as they allow a provider to know information about how users use their site. The provider's site must also comply with DNT (Do Not Track) for those users who want to opt-out.
      • +
    +

    Must not have any marketing which is irresponsible:

    • Making guarantees of protecting anonymity 100%. When someone makes a claim that something is 100% it means there is no certainty for failure. We know users can quite easily deanonymize themselves in a number of ways, eg:
      • -- 2.47.2 From 88c932c043e142ce4c811a0a2df2face1ec3ef4b Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Fri, 29 Nov 2019 11:28:57 +0000 Subject: [PATCH 4/4] Remove Matomo mention, sounds like advert --- pages/providers/vpn.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pages/providers/vpn.html b/pages/providers/vpn.html index c78c42c9..c4afa577 100644 --- a/pages/providers/vpn.html +++ b/pages/providers/vpn.html @@ -131,7 +131,7 @@ description: "Find a no-logging VPN operator who isn't out to sell or read your

      Minimum to Qualify:

        -
      • Must self host analytics (no Google Analytics etc). Options like Matomo are perfect for this as they allow a provider to know information about how users use their site. The provider's site must also comply with DNT (Do Not Track) for those users who want to opt-out.
        • +
      • Must self host analytics (no Google Analytics etc). The provider's site must also comply with DNT (Do Not Track) for those users who want to opt-out.

      Must not have any marketing which is irresponsible:

      -- 2.47.2