Secure encryption and online anonymity are now at risk in Switzerland

I didn’t mean it is misleading; I meant it shouldn’t continue to be misleading in face of UK/Swedish/Swiss laws etc; if and when they come to pass (if they aren’t being enforced already). UK’s IPA has been in force since 2016!

If I am allowed to be critical (and pedantic):

  • Hiding your downloads (such as torrents) from your ISP and anti-piracy organizations.

Can they in face of govt letters the providers or their partners (co-hoster, for example) are subject to?

  • Allowing you to bypass geo-restrictions on certain content.

Mostly true for VPNs with residential IPs. Not generally true and hence there’s no need to mention it.

good VPN providers will not cooperate with e.g. legal authorities from oppressive regimes

For sake of neutrality, must also include that the VPN providers themselves could be subject to draconian surveillance. “Oppressive regimes” sounds way too convenient (making folks reading it think … (Western) “democracies” must be fine).

Another common reason encrypted DNS is recommended is that it prevents DNS spoofing.

Standardized encrypted DNS transport protocols offer no such protection.

Other MPRs run by different companies like Google

Google has sunset their “One” VPN, afaik.

protection by segmentation only exists if you trust the two companies to not collude with each other to deanonymize you

Don’t believe this is true for Apple Private Relay. The guarantees are baked into the protocol/cryptography itself? Which is what MPRs at minimum should be, imo.

If you’re looking for additional privacy from your ISP, on a public Wi-Fi network, or while torrenting files, a VPN may be the solution for you.

May be not? Such reasoning implies ISPs are less trustworthy than VPNs because of government letters … but we now know govt letters are expanding to cover VPNs just the same?

We also think it’s better for the security of the VPN provider’s private keys if they use dedicated servers, instead of cheaper shared solutions (with other customers) such as virtual private servers.

Why is this sentence repeated on that page? “also think” can be removed as it is true that VPS’ slice of RAM is under the full control of the underlying Host OS (in most setups).

Mullvad is a fast and inexpensive VPN … IVPN is another premium VPN provider …

Premium? Inexpensive? Sounds sales-speak to me.

Bridges and proxies: Mullvad also allows you to use bridges or proxies to reach their API (needed for authentication), which can help bypass censorship attempts that block access to the API itself.

Also true for Proton… I hit their APIs from virtually any which place and it almost always has worked.

Mullvad is very transparent

Mullvad is transparent*

  • Censorship resistance features designed to bypass firewalls without DPI.

Moot. All censors running a “firewall”, as they mature, eventually will employ DPI. That’s how this goes.

  • VPN servers that use full-disk encryption or are RAM-only.

Won’t matter on a VPS.

While not strictly requirements, there are some factors we looked into when determining which providers to recommend. These include content blocking functionality, warrant canaries,

VPN providers subject to secret mandates can’t post canaries …

2 Likes