Support Wireguard VPN Protocol
Various other VPN providers are now supporting Wireguard. Would you consider this? (It's 10 times faster than OpenVPN on the same CPU.)
https://www.mullvad.net/en/blog/2017/9/27/wireguard-future/
https://www.mullvad.net/en/blog/2017/12/8/introducing-post-quantum-vpn-mullvads-strategy-future-problem/
-
Eelviny
commented
As many people have mentioned, WireGuard is not quite validated and ready for primetime. Having said that, it would be awesome if ProtonVPN could make an open beta so everyone's aware that it's not perfect, but can be used at their own risk.
-
Joshua Glenn
commented
Please do this Proton!
-
Sakis
commented
Although WireGuard seems amazing you should not trust it for some reasons.First,it is still under heavy development and not yet audited.Check https://www.wireguard.com/#work-in-progress.
Second,it is criticised by many for its inability to be used without keeping logs.So that really affects your privacy.WG's default behavior is to have endpoint and allowed-ip visible in the server interface.AirVPN had a lot of discussions over their privacy.These are some facts the said on their forums
Wireguard lacks dynamic IP address management. The client needs to be assigned in advance a pre-defined VPN IP address uniquely linked to its key on each VPN server. The impact on the anonymity layer is catastrophic;
Wireguard client does not verify the server identity (a feature so essential that it will be surely implemented when Wireguard will be no more an experimental sofware); the impact on security caused by this flaw is very high;
TCP support is missing (third party or anyway additional code is required to use TCP as the tunneling protocol, as you suggest, and that’s a horrible regression when compared to OpenVPN);
there is no support to connect Wireguard to a VPN server over some proxy with a variety of authentication methods.
It also doesnt support TCP, doesn't assign dynamic VPN IPs, and (at least currently) lacks a strictly necessary security feature (verification of the CA certificate provided by the server, therefore the client can’t be sure that on the other side some hostile entity is not impersonating a VPN server).Hopefully this issue will be fixed in the stable release.
Lots of VPN providers wrongly support it and lots warn against it.Also WG needs its own infastracture and it is not compatible with existing operations.
So i am sticking to the nice audited OpenVPN.Once WG fixes its flaws,finishes its development and gets audited then i will use it. -
MusicMan
commented
WireGuard is an absolute necessity when seeking the best protection/ privacy. It is now proven and being/already adopted by other top competitors.
-
Anonymous
commented
Had to cancel my subscription for now, as ProtonVPN does not offer WireGuard. I'll look out for a Black Friday deal at AzireVPN. Otherwise, I'll have a look at Mullvad (I know they don't do deals, but they cost 5 EUR/month flat).
-
Somebody
commented
This is the future of VPNs (and Cloudlfare already use it for their Warp service).
-
Anonymous
commented
I currently use wireguard and am a paying member of your service. With that said, It is a pain in the @$$ to keep flip flopping between the two and would love to see it integrated into one app, or integrated into a "PM Bridge" like feature
-
Jayan
commented
Best Wishes. I will use once adopted
-
Christopher Goss
commented
Your competitors are rolling this out as we speak (Mid 2019).
Extractum digitorum... -
Neutron
commented
I'd also love to test Wireguard with ProtonVPN
-
Mgtow
commented
For those want to try out wireguard, Tun Safe is providing it for free. it available for iOS and Android too.
They do ask for a donation to cover costs.
-
J Burrett
commented
I found wireguard transformational on my (not rooted) Andoid phone. I enjoyed a rock solid connection despite frequent flips between wifi and mobile internet and speeds such that I ceased to notice I was using a VPN.
I accept that Wireguard is not yet fully "tried and tested", but I am confident that it meets the needs of my threat model, and I would imagine that of many other "ordinary" users.
-
Kelly
commented
I second this!! Wholeheartedly!!
-
Z
commented
Would move my personal/family VPN accounts to ProtonVPN if WireGuard was offered. Thanks.
-
Erotavlas
commented
Finally, something is moving on https://protonmail.com/blog/lifetime-account-supporting-wireguard/
-
Anonymous
commented
I’m currently testing the wireguard iOS app made aviable through TestFlight.
I have set up my own vpn server for the purpose.
From a usability perspective, it beats IKEv2, which in turn is vastly superior in terms of speed and connection latency to openvpn.
Actually, with Wireguard, you don’t even notice you’re using a VPN.
Wireguard is over the top, depite using a test version of Wireguard for IOS -
Anonymous
commented
All arguments aside, from my personal experience Wireguard is so much faster than OpenVPN that I'd love to have this option available.
-
JeGr
commented
While having the latest and greatest in technology is always fun, I consider it really optional at this point. It's much like all things coming up now with fancy new ways based on blockchaining. No it isn't the holy grail to "blockchain everything". Neither ist Wireguard at this point. Sure, the tech is promising and might be fast as a lightning bolt (for you) but their own(!) website has a big fat message reading:
WireGuard is not yet complete. You should not rely on this code. It has not undergone proper degrees of security auditing and the protocol is still subject to change. We're working toward a stable 1.0 release, but that time has not yet come(!) There are experimental(!) snapshots (...) but these should not be considered(!) real(!) releases and they may contain security vulnerabilities(!!) (which would not be eligible for CVEs, since this is pre-release snapshot software). If you are packaging WireGuard, you must keep up to date with the snapshots(!)
So long story short: this makes no sense right now besides binding resources to alpha-grade software to follow even the slightest releases to avoid missing a security related bugfix etc. etc.
I'm all for including it with a (more) stable version, but until that it is alpha-grade software and a big testing ground, indifferent what other VPN providers may do and prematurely jumping the hype-train. Solid implementation does more for me than being the first to have access to some sweet that is just half-baked at its current state. -
Anonymous
commented
Even VPN.ac wireguard is coming soon!
https://blog.vpn.ac/wireguard-vpn.ac.html
Dear Proton, even if you dont want to make it public, I hope you already had wireguard testing phase started and starting soon! Then when the protocol becomes ready, you will be ready as well
-
RainmakerRaw
commented
As it's coming up to Black Friday/Cyber Monday I was hoping to add a couple of years' ProtonVPN to my little collection of trusted VPN services.Unfortunately no WireGuard is a killer for me, as it's so much lighter, faster and easier to use cross-platform compared to IPSEC or the old, bloated single-threaded openvpn. I added my votes but I guess I'll be waiting a year to check back with you again. I know from Reddit that Jason Donenfeld himself (WireGuard 'inventor' and chief coder) has offered to help with your implementation, as he did for Mullvad and AzireVPN, both of whom now run it commercially, successfully. I know you cited authentication difficulties but when the guy who literally invented the thing offers his help...?