mullvadvpn-app

> When I tried that I kept getting untrusted key warnings. You can skip them of course, but it kind of undermines any type of trust here Yes, the expected procedure would be to trust those keys for that package instead of disabling integrity checks. This is an issue between you and your package manager and not something Mullvad or any other packager (except OpenSUSE maintainers) can fix for you. You complain about the packaging and support of mullvad maintainers when you are having skill issues with your distro. https://github.com/mullvad/mullvadvpn-app/issues/2242#issuec...

It already has official packaging for Tumbleweed, see https://github.com/mullvad/mullvadvpn-app/issues/2242 for the upstream issue. Leap can use the normal Linux application, you will just have to provide the dependencies yourself.

the linked issues are quite interesting, why does go have to page in so much memory for the GoString? Is this for some sort of optimization? https://github.com/mullvad/mullvadvpn-app/pull/6727 if anyone else is more familiar with go (I only really do rust) is there no solution to preventing stack smashing on goroutines? https://github.com/mullvad/mullvadvpn-app/pull/7728 I understand that go routines have a smaller stack size (the whole green thread problem) but there's no way to fix this?

I've seen some Classic McEliece deployments, too. Well, I know of only one: Mullvad. https://github.com/mullvad/mullvadvpn-app/blob/main/talpid-t...

The 500 MiB thing is because the frontend is an Electron app. That's sadly how it is with Electron. The UI can of course be re-written into a language/framework that produces way smaller programs, but it's not currently really worth the tradeoff. Most people are not that constrained in disk or internet speeds. https://github.com/mullvad/mullvadvpn-app/issues/1572 The downloads folder access thing is because Apple made it so. If you run an installer from the downloads folder it will need access to the downloads folder. This has nothing to do with Mullvad, but is a permission check macOS puts on all software. The Mullvad VPN app has no code for doing anything in the Downloads folder specifically.

Nice. But I think you missed an update, Mullvad now also uses Kyber, your tool doesn't appear to. You also don't need Go: https://github.com/mullvad/mullvadvpn-app/blob/main/talpid-t...

They maintain separate peers for Pre-quantum and Post-quantum so that connectivity isn't interrupted. Each Pre-quantum peer is implicitly paired with a corresponding Post-quantum peer. Negotiating the PSK happens over a grpc api they expose at `10.64.0.1:1337`. The spec is public, if you're curious: https://github.com/mullvad/mullvadvpn-app/blob/main/talpid-t... If you're a fuddy-dud like me who uses the Vanilla WireGuard config files, I wrote a tool to upgrade your pre-quantum peer to a post-quantum one. https://github.com/d-z-m/pq-adapter-mullvad

Mullvad VPN has a PQC key exchange feature, they are even using two algorithms in parallel: McEliece and Kyber. https://github.com/mullvad/mullvadvpn-app/tree/main/talpid-t...

Captured traffic is now safe from future quantum computers. They are using classic McEliece ( https://en.wikipedia.org/wiki/McEliece_cryptosystem ) which is many decades old. One of the finalists for the PQC NIST competition - and may still be standardized, key sizes are too large they said. https://github.com/mullvad/mullvadvpn-app/blob/master/talpid... https://github.com/mullvad/mullvadvpn-app/blob/master/talpid...

You can use your own app that you compile from source. Wireguard and OpenVPN supported, I think. This page has their source code: https://github.com/mullvad/mullvadvpn-app You can also find configurations for using other Wireguard or OpenVPN apps (scroll down): https://mullvad.net/en/download/

Note that a major issue with Mullvad is the long standing open issue which prevents iCloud syncing on macOS [1] I've noticed this is not really a Mullvad specific issue, as the same thing happens when i apply their "killswitch" config (= pfctl firewall rules under the hood) while using other VPN services, like ProtonVPN. Apple seems to be blocking some of the proxy ip's or some iCloud service process is misbehaving somehow. [1] https://github.com/mullvad/mullvadvpn-app/issues/2401

I have both, but prefer Proton; I frequently have DNS issues with Mullvad, and also speeds are lower. Proton is also more expensive though... Also, there's a long outstanding issue (on their Github [1] ) which they have confirmed) that the Mullvad app causes iCloud services to stop syncing (bookmarks, Files, etc.). That's a showstopper if you use Apple devices... [1] https://github.com/mullvad/mullvadvpn-app/issues/2401