From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id aD84FnluzF7tNwAA0tVLHw (envelope-from ) for ; Tue, 26 May 2020 01:18:49 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id 8Pf2EXluzF7TIgAAbx9fmQ (envelope-from ) for ; Tue, 26 May 2020 01:18:49 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BEAF8940145 for ; Tue, 26 May 2020 01:18:48 +0000 (UTC) Received: from localhost ([::1]:43490 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jdOEw-0007J6-3t for larch@yhetil.org; Mon, 25 May 2020 21:18:46 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:56312) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jdO5E-00053t-C3 for help-guix@gnu.org; Mon, 25 May 2020 21:08:44 -0400 Received: from relay-1.mailobj.net ([213.182.54.6]:59052) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1jdO5C-0006jx-Sv for help-guix@gnu.org; Mon, 25 May 2020 21:08:44 -0400 Received: from v-1c.localdomain (unknown [192.168.90.161]) by relay-1.mailobj.net (Postfix) with SMTP id E972C12C7; Tue, 26 May 2020 03:08:39 +0200 (CEST) Received: by mail-1.net-c.com [213.182.54.15] with ESMTP Tue, 26 May 2020 03:08:39 +0200 (CEST) X-EA-Auth: iC3AvfBtWk1wppLXq/RzRnqpCAAQvdxfYViF6wb4Pv7/Uu1TzPA2FH748pQYmJI5qOZvLLU5cKSSoaJU2TGCAKJcbHvBbwEx From: Dmitry Alexandrov To: znavko@disroot.org Subject: Re: Avoiding ad-hoc provider-branded OpenVPN clients (was: python-pip is broken after updates) In-Reply-To: <87e9403535bd9159ce4ed4a84527fbfb@disroot.org> (znavko@disroot.org's message of "Mon, 25 May 2020 15:46:33 +0000") References: <20200525061153.GB17182@E5400> <87e9403535bd9159ce4ed4a84527fbfb@disroot.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) OpenPGP: id=525F7E60AD812C2361752BB4C8B0F8548EE7F3E7; url=https://openpgpkey.gnui.org/.well-known/openpgpkey/gnui.org/hu/hr4k5tkxm6shwdc18su4bkm34w3dctjd Date: Tue, 26 May 2020 04:08:36 +0300 Message-ID: MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Received-SPF: pass client-ip=213.182.54.6; envelope-from=dag@gnui.org; helo=relay-1.mailobj.net X-detected-operating-system: by eggs.gnu.org: First seen = 2020/05/25 20:50:31 X-ACL-Warn: Detected OS = Linux 3.1-3.10 X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001 autolearn=_AUTOLEARN X-Spam_action: no action X-Mailman-Approved-At: Mon, 25 May 2020 21:18:03 -0400 X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: help-guix Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Scanner: scn0 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of help-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=help-guix-bounces@gnu.org X-Spam-Score: -2.11 X-TUID: ubPNmZR/rZBH --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable znavko@disroot.org wrote: > An advice about using protonvpn is not safe. Is that supposed to be a reply to me, despite you have been addressing @efr= aim@flashner.co.il? If so, I=CA=BCve said nothing negative about =E2=80=98safety=E2=80=99 of pr= otonvpn.com. (Though, I could of course: their Tor gateway or rather the way they advert= ise it tells a lot about how they regard their users=CA=BC safety. Thankfu= lly, it=CA=BCs not available on gratis plan.) > If the software is opensource programmers can check if it is safe or not. Except, that there is zero need in doing that, when ad-hoc software can be = simply avoided. That=CA=BCs even more so on GNU, where OpenVPN support is = well-integrated into end-user networking configurators (such as =E2=80=98Ne= twork Manager=E2=80=99). But let us recall, that business interests of any service provider push the= m to limit the official support of standard solutions in favour of getting = as much users as possible addicted to their branded software. In fact, some proxy-on-top-of-VPN-providers, which are fine with driving so= me users away =E2=80=94 like donation-based riseup.net =E2=80=94 have alrea= dy _ceased_ to officially support anything but their branded clients. Unde= r the hood they still use the normal OpenVPN, of course, so it=CA=BCs possi= ble to extract the configuration, but you would not find it anywhere on the= ir website. Therefore, please keep in mind, that what you are doing by installing a bra= nded ad-hoc software instead of supplying generic client with credentials (= besides acquiring technical problems for yourself) is contributing your mit= e to promoting vendor lock-in. > In Russia protonmail.com is blocked I did not know why It=CA=BCs not hard to discover: https://roskomsvoboda.org/54951/ > but after I've discovered protonvpn I understood why. Nope. Googling is usually better than wild guessing. protonvpn.com is _no= t_ blacklisted in Russia [1]. [1] https://reestr.rublacklist.net/search/?q=3Dprotonvpn.com > The same is for tutanota mail. Yes, paradoxically enough, sometimes even state censorship should be thanke= d for opposing companies, that are trying to finish off the open Internet, = such as tutanota.io or (less so) protonmail.com. (Though censors obviously= have their own reasons for doing it.) --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIMEARYIACsWIQRSX35grYEsI2F1K7TIsPhUjufz5wUCXsxsFA0cZGFnQGdudWku b3JnAAoJEMiw+FSO5/PnhHIBAINhmzwQdyMphR4sNUSMjHGx2C0Q0zGlhqoUCZZV 2zovAQClg4neIvfybEAbg6k7RFkp8IEic89XeA5YGMcEMKfOAQ== =N8R+ -----END PGP SIGNATURE----- --=-=-=--