aboutsummaryrefslogtreecommitdiff
path: root/content
diff options
context:
space:
mode:
authorChristian Cleberg <hello@cleberg.net>2025-02-12 20:30:42 -0600
committerChristian Cleberg <hello@cleberg.net>2025-02-12 20:30:42 -0600
commita0bd753a5c3652bebf155082b8d2a2b384731611 (patch)
tree9772451f7c044bf6c459b5ab55056acaa042b428 /content
parentd94cc955f1977b8d88c715e167561b0e2543b1c7 (diff)
downloadcleberg.net-a0bd753a5c3652bebf155082b8d2a2b384731611.tar.gz
cleberg.net-a0bd753a5c3652bebf155082b8d2a2b384731611.tar.bz2
cleberg.net-a0bd753a5c3652bebf155082b8d2a2b384731611.zip
add obscura post
Diffstat (limited to 'content')
-rw-r--r--content/blog/2025-02-11-obscura-vpn.org119
1 files changed, 119 insertions, 0 deletions
diff --git a/content/blog/2025-02-11-obscura-vpn.org b/content/blog/2025-02-11-obscura-vpn.org
new file mode 100644
index 0000000..afd2e7b
--- /dev/null
+++ b/content/blog/2025-02-11-obscura-vpn.org
@@ -0,0 +1,119 @@
+#+date: <2025-02-11 Tue 11:40:00>
+#+title: A Review of Obscura VPN: A Two-Party VPN
+#+description: A simple review of Obscura VPN, a new VPN partner of Mullvad.
+#+filetags: :vpn:privacy:
+#+slug: obscura-vpn
+
+#+begin_quote
+This review is written at a high-level for users, not a technical deep-dive of
+VPN technologies.
+#+end_quote
+
+* What is Obscura?
+
+[[https://obscura.net/][Obscura]] is a new VPN offering that's [[https://mullvad.net/en/blog/mullvad-partnered-with-obscura-vpn][partnered with Mullvad]] to provide a unique
+service: a VPN that "can't log your activity" due to the fact that it uses
+Obscura servers for initial traffic routing and then passes off the traffic to
+Mullvad's WireGuard servers as exit nodes.
+
+This two-party VPN protocol allows you to use Obscura to relay your traffic, but
+they don't see your traffic. On the other hand, the exit nodes from Mullvad will
+see where you're connecting but cannot tell who you are as your traffic will
+come directly from Obscura servers with other users.
+
+* Privacy Features
+
+One of the things I look for when considering a VPN are privacy features
+intended to benefit users. Here are the features I love about Obscura:
+
+- Two-party VPN protocol with Mullvad's servers
+- No email required for sign-up
+- No credit card required, crypto options available
+- Open source [[https://github.com/Sovereign-Engineering/obscuravpn-client][repository]] is available
+- [[http://ngmmbxlzfpptluh4tbdt57prk3zxmq4ztew7l2whmg7hkqaof2nzf7id.onion/][Tor website available]]
+- Transparent display of the exit server's public key (see the Location page in
+ the app) so you can verify with Mullvad that you're connect via a genuine
+ Mullvad exit node using [[https://mullvad.net/en/servers][Mullvad's server listing]]
+
+* Initial Impressions
+
+** Available Platforms
+
+I am testing out Obscura on macOS, as that is the only available platform. This
+is the biggest downside, as I would not want to support different VPNs on
+different devices - if I'm using Obscura, I want to use it on all of my
+platforms (macOS, iOS, and Ubuntu).
+
+However, the macOS app is incredibly easy to install via the =.dmg= file
+available on Obscura's website. Upon first launch, you're presented with a login
+option and can create an account now, if you have not done so already.
+
+** Payment
+
+Once created, the app will ask you to pay if you do not have a subscription. As
+far as I can tell, there is no free tier available. In my opinion, this is a
+good thing as I hesitate to understand how privacy-focused apps make money when
+they offer free services to users.
+
+[[https://img.cleberg.net/blog/20250211-obscura-vpn/payment.png]]
+#+caption: Payment
+
+** Connection
+
+Once you've enrolled in either a subscription or one-time payment, Obscura will
+return you to the app and allow you to connect. You can choose a specific server
+location or automatically connect.
+
+[[https://img.cleberg.net/blog/20250211-obscura-vpn/connect.png]]
+#+caption: Initial Connection
+
+[[https://img.cleberg.net/blog/20250211-obscura-vpn/toolbar.png]]
+#+caption: Toolbar Utility
+
+** Speed
+
+The connection feels naturally smooth and I haven't experienced any disruptions
+or lag in my (very short) time testing out the application. To confirm, I
+checked a speed test while connected to a server location in my country.
+
+Speed test results:
+
+- 85.49 Mbps (Down)
+- 217.75 Mbps (Up)
+- 25 ms (Ping)
+
+** Mullvad Verification
+
+Lastly, I checked with Mullvad's verification tool (=mullvad.net/en/check=) to
+verify Obscura's claims that Obscura sends your traffic through Mullvad's exit
+nodes before connecting to your target.
+
+From the image below, we can see that Mullvad confirmed my traffic to be
+connected through a Mullvad IP address.
+
+[[https://img.cleberg.net/blog/20250211-obscura-vpn/mullvad-check.png]]
+#+caption: Mullvad Check
+
+* Final Thoughts
+
+Overall, I have found the app to be fast and user friendly. The privacy features
+are certainly compelling, but the platform has a ways to go before it can
+displace something like Mullvad in the privacy-focused portion of the VPN
+market.
+
+I wish Obscura offered the following features:
+
+- Available on more platforms
+- Specifics on how many devices will be allowed per account
+- More server locations, especially in countries with stronger data privacy laws
+- Options to pay with other crypto beside Bitcoin, such as Monero
+- Whitepapers or videos that walk through the technical details and show how
+ traffic can be verified to be encrypted and connecting through the various
+ expected nodes
+- Verifiable builds
+
+However, Obscura is a nice tool for now and I hope to see more information from
+the technical side to help more users gain comfort around the security and
+privacy of the tool.
+
+Used Obscura? Send me an email and let me know your thoughts!