Bitmask: an open source app to provide easy and secure encrypted communication

Re:Bitmask: an open source app to provide easy and secure en... by therealmarv on Monday August 25, 2014 @03:01PM (#8223460)

I would be sceptical. Does this thing breaks open standards like OpenVPN? I would love an opensource implementation of http://www.goldenfrog.com/vyprvpn/chameleon which works in China and also prevents Deep Packet Inspection. And about VPN: VPNs can also be a single point of failure for trust. You are giving away trust on your current connection from your ISP to maybe Bitmask/LEAP and a VPN which they call service provider. I also wonder how you want to make the financial side of this working. Running VPNs is expensive. I hope you succeed but I would say: Do not trust any free VPN out there.

[ Parent | on HN ]

Re:Bitmask: an open source app to provide easy and secure en... by meskio on Monday August 25, 2014 @03:28PM (#8223626)

Bitmask actually uses OpenVPN, just makes easy to use it securely. One summer of code has implemented support for obfsproxy (https://www.torproject.org/projects/obfsproxy.html.en), that hopefully will solve the problem in places like China.

Bitmask doesn't want to provide a proper VPN service, for the moment there is a demo service to try it. But the idea is to provide all the software easy to set up for providers, and the providers will charge you for it to sustain themselves. The nice thing of this model is that the provider only provides the service but your client comes from an independent organization, your provider can not put back doors on it.

The trust is a hard problem, we are moving the trust from the ISP to your provider (https://leap.se/en/doc/platform). Your ISP is something that you can not choose much, but on the provider you can choose or set up your own (https://leap.se/en/doc/platform).

[ Parent | on HN ]

Re:Bitmask: an open source app to provide easy and secure en... by dublinben on Monday August 25, 2014 @07:34PM (#8224862)

Tor works in China if you use a Bridge. Their obfsproxy bridges disguise Tor traffic as other forms of traffic that aren't being blocked, while giving you all the benefits of a Tor connection.

[ Parent | on HN ]