You're absolutely right, Privacy Pass would definitely be helpful to consumer VPN users! :-)
We haven't implemented Privacy Pass yet as it would require a browser extension, but it is one of the technologies we keep an eye on!
243 karma · joined October 5, 2016
We haven't implemented Privacy Pass yet as it would require a browser extension, but it is one of the technologies we keep an eye on!
> The client software is here: https://github.com/Sovereign-Engineering/obscuravpn-client, we also plan to make reproducible builds of our apps. In fact, I previously led the effort to revamp Bitcoin Core’s reproducible builds system to be [bootstrappable](https://bootstrappable.org/), work that is [referenced by the Tor project](https://gitlab.torproject.org/tpo/applications/tor-browser-b...).
With PEPs, strategically placed _extra hops_ actually _help_ with performance for flaky links by terminating TCP connections.
Another important thing to note: in our App, you can check your connected server’s public key against those listed on Mullvad’s server page, since we use the same servers as Mullvad's normal ones. It would be unheard of for a VPN provider (let alone a trustworthy one like Mullvad) to give their WireGuard private keys to a new partner.
> Unless I’m mistaken, you’re both controlling the client software (closed source) and the first relay?
The client software is here: https://github.com/Sovereign-Engineering/obscuravpn-client, we also plan to make reproducible builds of our apps. In fact, I previously led the effort to revamp Bitcoin Core’s reproducible builds system to be [bootstrappable](https://bootstrappable.org/), work that is [referenced by the Tor project](https://gitlab.torproject.org/tpo/applications/tor-browser-b...).
I actually talked to some of the Tor folks about this, and it seems like it mostly boils down to their chosen trust model and the fact that anyone can be a Tor node.
Most of the two-hop designs have fixed hops, and admittedly they can't beat Tor w/re privacy by any means. The fixed hops can however offer better reliability and latency.
Happy to answer any and all questions you may have
Oh very cool! I met Chris Wood at the IETF a while back, he's working on a bunch of cool things including Privacy Pass!
One good thing about WARP is that most sites block VPN services by using Cloudflare, but Cloudflare is unlikely to block itself.
Privacy-wise, it depends on your threat model but should be good enough for "I'm at a coffee shop and don't want to leak my SNI".
I assume you'll have to install a root cert in order to introspect HTTPS traffic though.
All the nix deployment tools had too much magic and broke, but nixos-rebuild always works and it's part of Nix!
Disko was great for bootstrapping servers: https://github.com/nix-community/disko
Fun fact: all of the current website's infra is NixOS-based
Fun fact #2: I overhauled Bitcoin Core's reproducible build system to use Guix (a Nix-inspired functional package manager)
I'm the maker of Obscura.
Happy to answer questions folks have. Also, what thinkmassive dug up is accurate: https://news.ycombinator.com/item?id=37711006
Update: Just fixed the Matrix->Discord bridge, apologies if it didn't work for you before.
True. This is why all client side source code will be released and reproducible builds offered on platforms that support it.
If you don't know what code you're running, yeah you're screwed either way.