Der Mullvad-Blog

A security vulnerability in the cryptographic library OpenSSL was just disclosed. OpenVPN clients that use vulnerable versions can be tricked into accepting a man-in-the-middle attacker as a valid VPN server. Mehr lesen

Version 50 is now available for download. Mehr lesen

The first new server in the USA is up and running. More are on their way. Mehr lesen

We now have servers in Canada. For now, we don't have servers in the USA. We just lost two suppliers that do not want to relay anonymous traffic in the USA. We hope to remedy this soon. Mehr lesen

The recently disclosed vulnerability in OpenSSL named FREAK can be used to attack OpenVPN clients. We have released a new version of the client with a patch, as well as published a blog post explaining the technical details. Mehr lesen

Version 49 is now available for download. It contains a patch against the FREAK vulnerability. Users of our client for Windows and OSX need to upgrade to the new version. Users of our Linux client should get automatically patched through their distribution.Users of plain OpenVPN should download new configuration files and update their OpenVPN client. Mehr lesen

[THIS IS AN OLD BLOG FROM 2015-03-05] Mehr lesen

Version 48 is now available for download. It primarily solves an issue with Stop DNS leaks on systems with a non-english Windows install. Mehr lesen

Version 47 is now available for download. It solves a few DNS leak issues and uses AES-256 as the default encryption cipher. Mehr lesen

The default OpenVPN stream cipher in new clients and new configuration files is now AES-256. When encountering certain connection problems the client program will fall back to Blowfish 128. To use nothing but AES, set "cipher = aes256" in Settings -> Advanced. Mehr lesen