Hacker News Reader

Hacker News

Comment by 7ewis | Hacker News Reader

Full thread

7ewis

Does this mean WireGuard will be moving to stable?

My VPN provider has said they won't support WireGuard until it hits 1.0

View on HN

Yes. A 1.0 is now on the horizon.

Get a better VPN provider. Or better yet, run your own.

This is what I've advising people with a little bit of know-how to do. Using Algo [0] (If you only need Wireguard and little else) or Streisand [1] (If you need Wireguard in addition to many other things) makes it pretty much trivial.

[0] https://github.com/trailofbits/algo

[1] https://github.com/StreisandEffect/streisand

I don't think it's fair to say "better" here. Waiting for stable software releases is a perfectly valid approach. It may not be your approach, which is also fine, but neither approach is better than the other.

The end goal here is security. Wireguard has an excellent track record, having a tiny, simple and clean codebase and having been reviewed by many skilled eyes.

Most of other solutions don't come close to that.

I actually do trust WG here, but it is explicitly pre-release software and I would really struggle to fault a provider from avoiding pre-release software. I mean, the WG main page still contains the following (https://www.wireguard.com/):

> WireGuard is currently working toward a stable 1.0 release. Current snapshots are generally versioned "0.0.YYYYMMDD" or "0.0.V", but these should not be considered real releases and they may contain security quirks (which would not be eligible for CVEs, since this is pre-release snapshot software). This text will be removed after a thorough audit.

Every security product has an excellent track record until vulnerabilities are found. Once it hits production and sees a 10000x increase in usage so it becomes a high value target for nation states, then it will be put to the real test.

>My VPN provider has said they won't support WireGuard until it hits 1.0

AFAIK there are some major issues with wireguard that have to be resolved before it's practical for commercial VPNs.

https://old.reddit.com/r/PrivateInternetAccess/comments/d1bl...

Yeah, there are some issues which makes it harder than it has to be but e.g. Mulllvad has been providing it to their customers for a long time. Required extra work but not insane amounts of it according to a guy at Mullvad who I was talking to.

Same here. I want to try WireGuard too but ProtonVPN doesn't support it yet. I may reconsider them as my subscription expires next year.

ProtonVPN is involved with funding Wireguard development: https://protonvpn.com/blog/wireguard-donation/

Reply on news.ycombinator.com