summaryrefslogtreecommitdiffhomepage
path: root/docs/security.md
AgeCommit message (Collapse)AuthorFilesLines
2025-10-03Add a SECURITY.md security policyLinus Färnstrand1-2/+5
2025-07-23Improve security docs around TLS connection to API serverLinus Färnstrand1-1/+6
2025-06-25Add Mullvad VPN loader thret at model documentDavid Lönnhager1-0/+3
Mention threat model in security.md Co-authored-by: Markus Pettersson <markus.pettersson@mullvad.net>
2024-12-12Enhance naming of Unix and JavaScript at security.mdLamTrinh.Dev1-2/+2
2024-11-07Update documentation regarding WSL/Hyper-VDavid Lönnhager1-1/+0
2024-10-18Add dedicated "known issues" documentLinus Färnstrand1-19/+10
Moves some known issues out of the security document. Keeps all known issues in one place. Allows the security document to be more focused on the app threat model and how it intend to solve that threat model. The security document is a more static document that should rarely change. While the known issues document will grow and shrink as new special cases are found and fixed.
2024-10-18Remove outdated statement about iOS blocked stateLinus Färnstrand1-1/+0
2024-10-16Update Android security docsDavid Göransson1-18/+35
2023-03-27Fix many typosAlexander Seiler1-1/+1
Signed-off-by: Alexander Seiler <seileralex@gmail.com>
2022-10-20Update security docsEmīls Piņķis1-0/+8
2022-10-04Document Android leaks reported in MUL22-03Albin1-7/+21
2022-09-27Document Android shortcomingEmīls Piņķis1-2/+2
2022-09-27Update security docsEmīls Piņķis1-5/+20
Due to recent changes to the daemon to prevent early and late boot leaks, the security docs need to be updated to reflect the new behavior.
2022-08-29Allow admin-local v4 multicast range when LAN sharing is enabledDavid Lönnhager1-3/+3
2022-04-05Delete all references to Shadowsocks binariesDavid Lönnhager1-1/+1
2022-01-14Simplify custom resolver to not leak any trafficEmīls1-13/+0
2021-12-13Allow only root to reach the API in blocked stateEmīls1-4/+5
2021-12-10Update docsEmīls1-1/+2
2021-12-10Add custom-resolver docsEmīls1-0/+13
2021-12-08Update security document for allowed endpoint fixDavid Lönnhager1-1/+7
2021-10-11Update macOS firewall impl to closer match spec around NDPLinus Färnstrand1-5/+0
2021-10-11Update security documentDavid Lönnhager1-3/+7
2021-06-07Update security documentDavid Lönnhager1-5/+2
2021-04-16Update security documentDavid Lönnhager1-0/+5
2020-10-22Describe custom DNS in the security documentDavid Lönnhager1-7/+9
2020-10-12Explain persistent filters in the security documentDavid Lönnhager1-0/+15
2020-10-12Rename 'Block when disconnected' in the security documentDavid Lönnhager1-4/+4
2020-09-02Use a mark to whitelist tunnel trafficEmīls1-2/+5
2020-06-23Update security document with restrictions to allow relay ruleLinus Färnstrand1-3/+13
This fixes audit finding MUL-02-002 and MUL-02-004
2020-04-03Allow fc00::/7 instead of fd00::/8 for unique local addressesLinus Färnstrand1-1/+1
2020-03-16Update security documentationDavid Lönnhager1-5/+9
2020-02-26Fix typo in docs/security.mdChandradeep Dey1-1/+1
2020-01-29Rename blocked state to its new name, errorLinus Färnstrand1-5/+9
2020-01-29Clarify that the user explicitly sends problem reportsLinus Färnstrand1-1/+1
2020-01-07Fix according to feedbackLinus Färnstrand1-8/+9
2020-01-07Improve mobile section. Mostly iOSLinus Färnstrand1-7/+9
2020-01-07Shorten text on "kill switch"Linus Färnstrand1-7/+4
2020-01-07Add section on desktop GUI and system serviceLinus Färnstrand1-1/+25
2020-01-07Slightly clarify on DNSLinus Färnstrand1-4/+4
2020-01-07Mention again that firewall rules are changed atomicallyLinus Färnstrand1-7/+9
2020-01-07Clarify and be more exact regarding allowing traffic to VPN serverLinus Färnstrand1-6/+12
2020-01-07Describe rules for IPv6 NDP betterLinus Färnstrand1-2/+3
2020-01-07Clarify always allowed trafficLinus Färnstrand1-4/+4
2020-01-07Add dotLinus Färnstrand1-1/+1
2020-01-07Remove "always allowed traffic" headerLinus Färnstrand1-2/+0
2020-01-07Clarify what "that" isLinus Färnstrand1-2/+2
2020-01-07Add initial macOS deviationsLinus Färnstrand1-0/+5
2020-01-07Restrict DHCP rules to only allow over UDPLinus Färnstrand1-6/+7
2020-01-07Small fixesLinus Färnstrand1-2/+2
2020-01-07Add section on AndroidLinus Färnstrand1-1/+10
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.