Consistent with our commitment to regular independent security audits, we have scheduled our eighth annual security audit with Cure53, to be conducted over the course of two weeks in July. As in previous years, audits target systems and services that have undergone significant updates and where review provides the most value to customers in terms of security and auditability.
Continue reading
IVPN subscriptions now include access to additional services such as Mailx for email aliasing, modDNS for DNS filtering, and Portmaster for application firewall control. The standard way to handle multi-service access is account federation: one identity propagated to every service.
Continue reading
In summary: We identified a potential DNS leak issue affecting our iOS app in brief intervals during WireGuard key regeneration. Details of the issue When IVPN iOS app rotates WireGuard keys while VPN is connected, the app calls the asynchronous method setTunnelNetworkSettings to update VPN tunnel with new configuration.
Continue reading
Context TunnelCrack is the combination of two independent security vulnerabilities (LocalNet attack and ServerIP attack) that affect VPN applications. The research paper detailing these vulnerabilities was published and presented on 11 August 2023. IVPN apps were not tested by the researchers, and unlike other providers, we did not receive a vulnerability disclosure.
Continue reading
Quantum computing poses a threat to VPN security due to its potential to break traditional encryption algorithms much faster. In an attempt to mitigate this risk and provide quantum resistance, a PresharedKey (PSK) is now used in addition to existing encryption.
Continue reading
We’re pleased to announce that an independent security audit of the new IVPN gateway infrastructure has concluded. We recently decided it was necessary to upgrade our VPN gateway servers to a major new OS version which included many configuration changes.
Continue reading
In-line with our commitment to perform an annual security audit of IVPN systems, we have commissioned the independent security auditing organisation Cure53 to conduct a security audit at the end of February 2023. We aim to publish the results of the audit no later than April 2023.
Continue reading
We’re pleased to announce that an independent security audit of the IVPN apps conducted by Cure53 has concluded. Since our last audit 12 months ago we have made significant updates to apps on all platforms and judged that a new audit with similar scope is necessary this year.
Continue reading