Hacker News Reader

Comment by dfee | Hacker News Reader

This might sound dumb. But, I use ProtonVPN because Mozilla partnered with them and I place trust in Mozilla’s ability to make a more informed choice than I can make — largely due to their access to information and on hand knowledge and expertise.

https://blog.mozilla.org/futurereleases/2018/10/22/testing-n...

View on HN

There are a lot of previous discussions on Proton{VPN,Mail} to read up: https://hn.algolia.com/?query=protonvpn&sort=byPopularity&pr...

I use ProtonVPN (and ProtonMail) for business but I haven't been that impressed so far. For personal use (e.g. BBC abroad) I just use OpenVPN on a Raspberry Pi.

I recently wrote a full review on my blog (so I won't repeat it all here): https://unop.uk/protonmail-review/

I'd definitely be interested in a guide on how to set up a proxy on a free-tier cloud hosting site. Finding that ProtonVPN does not let me watch content I legally pay for if I'm in a different region...

Just want to let you know you can delete your payment method by visiting the "Payments" tab within the Settings of your account.

Also, Bridge is receiving a lot of attention internally. Your v1.1.1 experience will continue to improve.

Appreciate your feedback.

As much as I would like to support Mozilla, connecting to protonvpn.com with Firefox 65.0.1 throws me an insecure site error:

Your connection is not secure

The owner of protonvpn.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

Doesn't inspire confidence.

Have you messed with your certs? It should be absolutely fine. I read over the weekend that some people were distrusting QuoVadis because or something or other to do with DarkMatter? I don't really understand too much about it, but proton use QuoVadis[0] so you'll get improper SSL for their sites if you did that.

[0]https://old.reddit.com/r/firefox/comments/au7zcz/how_to_remo...

No, but.... The above error was from my office. When connecting to ProtonVPN's website via a VPN, there is no error. Seems like it could be a certificate configuration error with the network I'm using, which is odd because it's a University and I've not seen that error anywhere else I regularly visit.

>No, but.... The above error was from my office

So.. IT that manages the certs and the gateway, use a MIMT 'attack' to decrypt all your traffic, scan/read it, and then encrypt it again to send it out to the wilderness of the Internet. This is what the browser is messaging. Notifying you that "something is wrong with the connection. Browser is not sure what exactly, thus pointing the finger on the certificate.

Perhaps someone can explain the above with more technical terms, but in a nutshell, our companies, on our corporate desktops/laptops sniff through each and every bit and byte that goes in and out of our machines.

A commom workardound "permanent accept this exception" (or similar wording) makes the browser to stop complaining about this breach of privacy.

The reason this warning will appear in Firefox is that it does not use the OS certificate store and it uses a built-in store. The corporate MitM cert will have been added to the OS root cert store so other browsers will trust it but it probably hasn't been added to the Firefox one.

Yep, sounds like they're lazy. They should be using a script like this to inject the cert into Firefox:

https://github.com/eggsome/AddFirefoxCert

Although:

1. I don't like to encourage this kind of behavior (I only use this for "good")

2. The certutil tool needs to be recompiled from the mozzila sources for new firefox.

>So.. IT that manages the certs and the gateway, use a MIMT 'attack' to decrypt all your traffic, scan/read it, and then encrypt it again to send it out to the wilderness of the Internet.

Yup, typically referred to as "SSL Inspection" by the companies that produce products to monitor SSL traffic. Normally this is accompanied by controlling the clients and pushing a cert into their browser to avoid the warning messages.

Yikes. I think I like to see the browser warning.

Same thing happened to me with NordVPN yesterday.

FWIW, I get the same error connecting to yc.dev. Seems like a bug.

Works for me. Same browser on Ubuntu LTS.

if your office firewall blocks a site secured with ssl, you will see an error message something like this. Do you have an aggressive firewall? If so, it's probably being blocked. Try from a different connection (like a coffee shop or home) and see what the result is.

Let me remind everyone that ProtonVPN is the only VPN service publicly available I know of that owns even a small portion of their own hardware and data center.

I also use ProtonVPN, and proton mail, which I can also highly recommend.

I also use ProtonVPN.

*disclaimer, I also work for ProtonMail so my use of ProtonVPN is more of a company perk, but one I enjoy.

Reply on news.ycombinator.com