I did not say the requirement was met wtf haha ??? calm down and don’t over-interprate what I say
I only put this : “You can reach our CEO, co-founders, and staff directly through any of the channels listed above. We listen to every issue that our users have and engage in discussions on features, improvements, favorite snacks, you name it.”
But now yes I indeed changed the orange mark to green, after adding more infos.
Nice to hear, same here.
Let’s give up with this. I was doing a lot of edits and I initially did not put a green mark. Then I added more informations and put the green emoji.
Going forward, we have to decide if that is enough or not and we wait for yegor’s response.
Why @ph00lt0 considered my tool suggestion as a double of this topic and deleted it ?
Could the mods let us vote please ? It would make sense to talk about more than “opinions” here asked by OP, to speak about it being listed on PG.
because the OP of that was litterly just an opinion, there was no suggesting of adding it to the website either in the post. I suggest we wait on the answers on the minimum requirements and we can change this thread into a tool suggestion.
It seems normal since IVPN says “Does IVPN offer Perfect Forward Secrecy (PFS)?
Yes, our OpenVPN servers are configured to automatically generate new encryption keys every hour. If an adversary was able to crack the encryption key, they would only be able to decrypt the traffic captures since the last key rotation.”
So it seems that this feature is applicable only to OpenVPN so I will put a green mark to this criteria for Windscribe since they also support PFS for OpenVPN.
The support told me :
"Yes, all of Windscribe’s VPN protocols support Perfect Forward Secrecy (PFS). PFS ensures that even if one session key is compromised, it cannot be used to decrypt past or future sessions, providing an extra layer of security.
Windscribe doesn’t use any third-party trackers or analytics, which means it should respect the Do Not Track (DNT) settings in your browser. However, to verify if a website respects DNT, you can use browser extensions like “Privacy Badger” or “Disconnect.” These can provide insights into whether websites are tracking you.
Windscribe prides itself on minimizing third-party interactions to protect user privacy. The connection to Cloudflare Insights is part of our infrastructural security and performance management provided by Cloudflare. It’s primarily used to ensure the website’s stability and security, not for tracking or analytics in the traditional sense. We aim to keep our users informed and maintain trust by avoiding unnecessary tracking."
Hence, I put a green mark for the requirement about DNT and analytics.
Consequently, I think they meet all the criterias. We just have to decide if it is acceptable to support double-hop only at the browser level. But otherwise, they meet all the criterias.
Now do you authorize to suggest it as a tool recommendation ? @ph00lt0
At least two of those values are outdated. As of writing, the following are the correct values:
iVPN: I couldn’t find the total number of iVPN servers, only a server status page with a list of their servers and I don’t have the time to count them.
Proton VPN: 8633 (only shows the amount of total Proton VPN servers with cookies and JavaScript enabled, at least to me when using Brave on Android).
You likely took that data from the Techlore VPN toolkit, it is outdated and I just made a pull request and opened an issue to update it on its GitHub project.
I know there is now seeminly two Windscribe threads going but this felt more like a question to ask here…
Is this still an issue for using P2P with Windscribe port forwarding?
If the government shows up and says, “who is using port xyz on this IP address?” it seems like windscribe must have a record to hand over (that will lead directly to the user), at least during those 7 days that the forwarding is active.
If the port forward is active at the time of the request, yes we have this information (there is no way not to). If we lie, we go to jail.
Could just be my lack of understanding but it seems like, if you are personally identifiable for 7 days anytime port forwarding is active that would be an issue. Especially for users who are constantly forwarding a port to host a service.
Maybe this is true for all VPNs that allow port forwarding and I just did not realize it.
understandble.
But in this case Wellfound seems very very reliable.
In fact I wanted to share their employee handbook. which is on Wellfound and I would recommend everyone interested or indeterminate about the company to read it, especially the About Us section.
They explain the meme thing there too.
The Windscribe Corporate Philosophy
Create and release the best possible products that are reliable and easy to use
Do not lie, cheat, or make false promises
Provide our products and services for free to those that need it most and have the least
Offer fair prices to everyone else 5. AFTER keeping users safe and protecting their privacy, make them laugh
There are only three things anyone should take seriously in life: their business, their relationships and their health. Apart from that, laugh as much as you can, and make others laugh as much as they can. We take our business very seriously, on all levels - technical especially - but we have the ability to have a lot of fun in the process. Our customer communications are very informal, because we treat our customers like our friends. We want them to have the best possible experience and to get the best possible value from our products - all while laughing their butts off. Life isn’t always fun, it isn’t always happy, but we will be damned if we don’t crack a joke or five in the face of it all.
Can you confirm if PFS is applicable to all protocols or only OpenVPN ? If yes, do all our protocols support PFS ?
Do you plan to do new audits of your clients ? Support told me " the 2022 audits are pretty much irrelevant at this time". The audit of the mobiles apps was very difficult to find.