What should we require of VPN providers on macOS?

[jonah (Jonah Aragon)]

I’m extremely unsure why you are confused reaction still, but anyways yes I agree with you lol

@privacycarrot

I don’t think you can draw this conclusion from this TN, and it’s more of an uneducated guess rather than a definitive thing. The beginning of that article clearly explains why Apple says it shouldn’t be used in shipped apps:

macOS implements the BSD Packet Filter mechanism. This has two expected use cases:

• As an implementation detail of various system services built-in to macOS
• As an advanced feature for users, site admins, and so on

It is not considered API. <…>

Network Extensions are indeed much more maintainable than PF rules for app developers as they allow you to update your extension reliably without affecting the rest of the system.

@privacycarrot

I’d be extremely surprised if they just removed a firewall from their base system without providing an alternative. Especially given they need this functionality themselves and they know users need it as well.