diff options
| author | Emīls <emils@mullvad.net> | 2022-01-14 15:33:29 +0000 |
|---|---|---|
| committer | Emīls <emils@mullvad.net> | 2022-01-14 15:33:29 +0000 |
| commit | 1e9f7fcaa1a489b88e49faadf7ee4a3233426045 (patch) | |
| tree | a49c6d32ac3bf56cd1332a34f74388607d8dce8e /docs/security.md | |
| parent | c0396210ad8bd9e6e51c4b36975fa7a9de3270ff (diff) | |
| parent | f46e257b5a0de0b530016672773ecda5d08de9df (diff) | |
| download | mullvadvpn-1e9f7fcaa1a489b88e49faadf7ee4a3233426045.tar.xz mullvadvpn-1e9f7fcaa1a489b88e49faadf7ee4a3233426045.zip | |
Merge branch 'simplify-custom-resolver'
Diffstat (limited to 'docs/security.md')
| -rw-r--r-- | docs/security.md | 13 |
1 files changed, 0 insertions, 13 deletions
diff --git a/docs/security.md b/docs/security.md index b7ddfea71e..b85b5ef0e6 100644 --- a/docs/security.md +++ b/docs/security.md @@ -240,19 +240,6 @@ The intended use case for this setting is when the user want to only switch betw connectivity at all and using VPN. With this setting active, the device can never communicate with the internet outside of a VPN tunnel. -### macOS network-check - -macOS needs to do a connectivity check before the daemon is able to connect to a tunnel, but the -connectivity check will fail in the blocked state imposing a hefty timeout before a tunnel can be -connected. The connectivity check requires a working DNS resolver and access to `captive.apple.com`. -The feature is discussed in detail [here](allow-macos-network-check.md). - -The app has an option to allow the network check to leak in the error state and during the -disconnected state if _Always require VPN_ is enabled. When the option is enabled, the firewall will -allow all DNS traffic coming from a mullvad specific unix group, and it will allow all traffic to a -set of resolved IP addresses coming from root (as identified by a unix user ID of `0`). - - ## DNS DNS is treated a bit differently from other protocols. Since a user's DNS history can give a |