Search the Community

With the latest revelation from google about Quantum Computing, I would like to know how safe arewith with Airvpn? What is the best encryption method and how do we implement it .

Please add an indicator for the Upload and another for the Download to Eddies UI Window to indicate whether the packets are Encrypted or not. I suggest green = packets are encrypted and red = packets are not encrypted.

Recently, I read that the US government is planning to pass a bill called the EARN IT act proposed by senators Lindsey Graham and Richard Blumenthal. Basically, with it passed, the government can force companies to drop encryptions for online messages so they can read our private conversations.I don't need to explain why this is a bad idea so I'll just cut to the chase. Please follow this link, read about it and Call on your representatives to oppose the Graham-Blumenthal Bill! (U.S. Citizens only I'm afraid)

Lately I've been thinking about the prospect of using VPN's in conjunction with the Tor proxy and done some research. I know there are both pros and cons to Tor-over-VPN and VPN--Over-Tor connections and played with the idea of using both connection types at once - something I like to call the "Sandwiched Connection" in that you layer your Tor connection between two separate VPN connections. Please correct me if I got any details wrong or missing. First, you have your plain naked internet connection without a VPN or proxy so your ISP and local network can see everything you're doing. Next, you connect to a VPN server. It masks your IP address and location from your ISP as well as encrypts your web traffic so they have no idea what you're doing. However, the company managing the VPN server will have access to your real IP address, location and web traffic that will be decrypted in their servers - making it important it is a trustworthy service provider that doesn't keep logs of your activities and allows you to create your account with a temporary email address, no personal details and paid with cryptocurrency (that is untraceable like Z-Cash and Monero). You connect to your Tor proxy. Ordinarily, the Tor entry node will know your IP address and location. Since you are using a VPN, it will only know the masked address provided by the VPN server. Not only that but the Tor proxy will further encrypt your web traffic so even the VPN provider won't know what you are doing, just like how it, in turn, hides it from your ISP. Even better? Your ISP won't even know you are using Tor in the first place. However, the Tor exit node decrypts your web traffic and has full access to it as if you were never using a VPN to begin with. If the exit node happens to be malicious or operated by any authority that doesn't like what you're doing, they could potentially call whoever is operating the entry node and/or follow the mask IP address to the VPN service provider and contact them for details concerning you. Again, a trustworthy VPN provider with a no-logs policy is important. Then comes the second VPN connection. After you connect to Tor, you connect to that second VPN server which should encrypt your web traffic from the tor exit node. Whatever company is managing that second server (it could be the same service as the first one or a different one) will only know the IP address and location provided by the Tor proxy and first VPN server but it will know your web traffic as it is being fed to their servers and decrypted. Not to mention that this "sandwiched connection" will deliver a big dent to your connection performance so it helps if you have a powerful router connected via ethernet. So at the end of the day, I figured, someone has to know what you're up to online which leaves the question "Who do you trust with your personal information?" Plus this is all just theory, as far I can tell. Has anyone ever tried putting this into practise? Can anyone provide any further insight into the "sandwiched connection"? I look forward to talking about it.

I use AirVPN on my desktop and my android phone (Galaxy S7). Everything has been fine for years. But now, all of a sudden, when I open the AirVPN client on my phone and press the config file to connect with, it comes up with an error saying "Need PKCS file encryption key, enter password for key." I have never been asked this before. The only thing that has changed recently that I can think of is that Verizon recently updated the phone's software. As far as I know I have never been asked for a password other than to log into my AirVPN account, and then probably only once. Would this key want my AirVPN username password, or something else? I don't think I ever made/used/recorded a password for this "PKCS key". What should I do? I'm unprotected! Thanks...

Quantum computers are coming - and probably sooner than we think. Does AirVPN have any thoughts or strategy to mitigate this threat to VPN-security?

It's a new feature in OpenVPN 2.4, for more privacy and can also help with censorship circumvention in some cases. https://github.com/OpenVPN/openvpn/blob/master/Changes.rst Can AirVPN implement this?

Hi all, Does anyone know the security quality of masked data in JSON Payloads? Obviously no substitue for HTTPS or a VPN but whats the general thoughts on it? Cheers

I would like to request that AirVPN change the gift voucher system so that we can purchase by a time period instead of by an amount. A good example of why length is a better system is that we could take advantage of the current sales to buy time to use for 6 months at the sale rate and then give it as a gift. When we can only purchase by amount, then giving someone a gifted amount means they get less time because they purchase at the regular rate. Personally I want to add credit to my account but there is no point if I have to make a new account afterwards so I can have new certificates. On that second point, please allow us to regenerate new certificates. Its a good idea to regenerate your certificates every 3-6 months and currently the only way to do that is to create a new account.

Hello, - I have been reading up on VPNs and keeping digital footprints to a minimal. I am already familiar with the fact that just because you have a VPN on it doesn't make you 100% completely anonymous and I have taken other measures to protect myself from that. However, I am disappointed when it comes to secure, completely anonymous VPN services. Some factors that usually make me unsubscribe from a VPN service are the following: they keep logs (or metadata), they don't care about their user's input or feedback, slow speeds, and not enough built-in and tight functionality such as killswitches or VPN over TOR. So I have done my research and majority of the sites/individual people have said this is the place to go. So here are some questions I have. 1. What logs or metadata do you keep about your users and for how long. 2. What are the pros and cons of using TOR ----> AirVPN (more commonly referred to as vpn over tor) on AirVPN. 3. If I use AirVPN over TOR what would the speeds look like on a normal connection? 4. If I use AirVPN over TOR what information or logs would you guys see? 5. What are the security risks of using AirVPN over TOR? 6. What special functionalty does AirVPN have (such as kill switches, built in TOR ---> AirVPN Connection) 7. Does AirVPN protect against DNS Leaks, WebRTC Detection? - Thank you for reading, if someone could reply in detail to these questions I would be quite grateful!

What do you think about IVPN encryption, amount of servers, policies and any other comments about three servce. Here is the encryption they use, I got this information from the logs when I connected to there VPN Edit. tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA Here is there website https://www.ivpn.net

Is this a misconfiguration issue? I observed via tcpdump on eth+, Noscript's ABE feature causing 10.x.x.x to contact the Air server ip on port 80 -- outside the tunnel. Then the Air external server replied outside tunnel -- port 80 -- to 10.x.x.x. This should not happen. Correct? This occurred during the usual back and forth to informaction.com and the OCSP response for Noscript's certificate. Additionally I have my firewall configured so that my local interface *only* connects to the modem/router and Air server ips. It's the AirVPN recommended firewall settings for linux. Anyone else experienced this?

Hi, I have tried this service a little bit now, and it seems to work fine for my needs. However I now have two obstacles that I can't seem to overcome with my current setup: 1. All supported vpn-clients seem to require admin privileges (Windows) each time I connect to AirVPN, but for my work laptop I need to request admin privileges each and every time (and say why I need them), so it is not feasible in the long run. 2. Even if I have my phone or laptop connected to VPN, when I try streaming to my TV using Chromecast (1st gen) it doesn't work, because Chromecast actually performs the http requests itself (ie outside the VPN). The only proper solution to these two problems, as far as understand it, is to have a router with the VPN connection, and then connect both my laptop and Chromecast to this router (using wifi). However, when browsing the forum, many people talk about most standard routers out there having too little CPU power for this. But having a dedicated server for this is out of the question for me, since I need a simple and easy setup, suitable for travel. On the other hand, I don't need "amazing" speed. My current internet connection is 10/1 Mbps, and I think if it drops down to 4-8 Mbps when using a standard DD WRT router setup I still can watch Netflix and similar at decent quality. Anything faster then that would of course be nice, but nothing I am prepared to pay extra for, or spend extra time setting up (unless we talk like 30 minutes extra). So, can someone recommend a decent router that could handle this? Would I need something like Netgear Nighthawk R7000, or can I get away with something cheaper? Preconfigured routers from an online shop is not an option for me, since I am in Thailand at the moment and don't trust the postal service here, also I basically want to find something that I can start using like today or tomorrow. So a list of recommended routers would be really helpful, then I can go to some local IT shop and check what they have and compare to that list. Also, I see that the main reason for the VPN putting so much strain on the router CPU is the encryption and decryption of the data. But is there no way to disable this encryption when not needed? What would be the reason for encrypting my Netflix traffic, for example? I know that the "main" feature of an VPN usually is considered to be privacy of some sort, but in cases when it really isn't needed there should be a way to optimize for speed, right? Because, if encryption could be disabled, surely a much cheaper router would work, and still give good speeds, I am sure... Regards /Jimi

I'm testing AirVPN on Linux Mint 17.3 using the .deb package that I found on the Air site. I had used three other VPN services and always had debilitating speed issues, especially when using AES-256-CBC (OpenVPN). I decided to try AirVPN. I installed the .deb files with the client. I am on the East coast of the US. I tried a Pennsylvania server and the speed was not very good. (I get an average of 25 Mbps download speed through my ISP without the VPN.) I then tried two other servers in the US and I'm getting up to 25 Mbps on three different speed tests. My IP is anonymous and there is no DNS leakage or IPv6 leakage. But after my previous experiences, I'm suspicious of the speeds I'm registering using some of the AirVPN US based servers. It makes me wonder whether encryption is being used, and if so, to what level. I haven't found a way to check that. I'm going to try Wireshark to see if the connection is encrypted. Does anyone have any ideas about this? Thank you.

I'm new to AirVPN. Got everything set up using the AirVPN client. I ran a DNS leak test, eveything looked good. Then I sniffed the connection through WireShark and was surprised to see many of the IP addresses of the sites I was connecting to, including site text data. I also saw the VPN IP addresses, but seeing the sites I was connecting to is a little concerning. Is this information visible over the network?

Sadly last night i realize that my free pc that i got and setup pfSense will not do any kind of AES encryption, (should have seen this coming when its just a celeron) so i need suggestions on a cpu/mobo combo that can handle the workload. My internet speed is 10mbits down and 3mbits. I've out of the hardware game for a long time so i don't know the line that AMD has and intel are also confusing, I really don't want spend a lot of money so a i7 or i5 is out of the question (unless they are really cheap). I like AMD because they are cheaper but im open to suggestions. I would like the board to have intel LAN since it work well with pfsense but no necessary. What is necessary is two pci (not pci-e) slots as i have two gigabit intel cards to add. Any suggestions I would appreciated.

I'd love to see twofish, threefish, serpent and skein offered. I understand your trepidation with ECC completely. I'd also like to see xor support added as well. Your service is top notch and as linux user I am very pleased with your new gui client with all of great options available. Keep us in the loop plz

So far AirVPN looks like a really good choice for a VPN provider but there are some thing that I would like to see added, these are deciding factors for me. Currently AirVPN is using RSA 2048 bit but I would like to see it upgraded to 4096 (more security doesn't hurt), this is just my OCD. Most would say 2048 is fine and is the latest standard but why not upgrade it? We don't exactly know what certain adversaries have resource wise. My second wish is to see more locations. They have quite a good choice in servers and I know it takes time to find the right data centers but what are staff searching for currently? Or are you guys not considering anymore locations? Personally I would like to see servers in Iceland, they are very friendly to press and freedom of speech and haven't been known to be tyrannical and militaristic. Anyways I would like to see what everyone else thinks. Edit: Message to staff. There are a couple good hosts in Iceland and DataCell is the best. PLEASE AirVPN team check them out. They also offer unlimited bandwidth ideal for a VPN server and have reasonable prices. https://www.datacell.com/

Hello, I think Air should have HSTS (HTTPS Strict Transport Security) enabled on your website for even more security. See this article from EFF for more information. Best regards, anonym

Hi all, if someone could help me please, how does the Open VPN client generate the RSA keys it uses for the initial handshake when logging on and then for the encryption of traffic? Does Open VPN generate it's own keys ( and if so according to what rules) or does it 'buy in' a key or key template from the company of the name RSA or where do these keys come from? Thanks.

Hello, I have seen other VPNs give you the option to choose your type of encryption. Would it be possible for AirVPN to make encryption level an option? Thank you.

I've been assisting a friend in getting set up with AirVPN. He's currently at a university out of the US and needs a VPN primarily for accessing US restricted content. Unfortunately, his university network effectively blocks everything, PPTP won't connect on other VPN providers, and AirVPN is unable to complete TLS handshakes on any port available. I did manage to get him up and running with AirVPN running over SSH, however, the performance is leaving a great deal to be desired: maybe 8-10 kilobytes/second. I spoke with a friend of mine who is a networking professional, and he recommended a possible solution. Basically, disable the encryption on the VPN tunnel, and instead rely on the encryption in SSH to protect the session. Given the architecture of AirVPN, will the servers allow unencrypted VPN tunnels? And is this a secure or practical thing to do? Thanks.