summaryrefslogtreecommitdiffhomepage
path: root/docs
AgeCommit message (Collapse)AuthorFilesLines
2024-12-12Enhance naming of Unix and JavaScript at security.mdLamTrinh.Dev1-2/+2
2024-12-11Add 2024 audit report and accompanying documentationLinus Färnstrand1-1/+5
2024-11-28Add MLLVD-CR-24-03 as known issue of AndroidDavid Göransson1-1/+31
2024-11-27Clarify automatic port selection for iOSBug Magnet1-2/+16
2024-11-07Update documentation regarding WSL/Hyper-VDavid Lönnhager2-13/+19
2024-10-28Add documentation on automatic use of Multihop when DAITA is enabledMarkus Pettersson1-1/+11
2024-10-24Add note about Application Guard being deprecatedLinus Färnstrand1-2/+5
2024-10-18Add dedicated "known issues" documentLinus Färnstrand2-19/+228
Moves some known issues out of the security document. Keeps all known issues in one place. Allows the security document to be more focused on the app threat model and how it intend to solve that threat model. The security document is a more static document that should rarely change. While the known issues document will grow and shrink as new special cases are found and fixed.
2024-10-18Remove outdated statement about iOS blocked stateLinus Färnstrand1-1/+0
2024-10-16Update Android security docsDavid Göransson1-18/+35
2024-08-27Add Shadowsocks to retry orderDavid Lönnhager1-2/+3
Co-authored-by: Sebastian Holmin <sebastian.holmin@mullvad.net>
2024-08-23Fix Typo issue from `passprase` to `passphrase`LamTrinh.Dev1-1/+1
2024-04-30Update split tunneling documentationDavid Lönnhager1-9/+9
2024-04-16Add DAITA Windows client and updated tuncfgDavid Lönnhager1-1/+1
2024-03-27Refactor `mullvad-relay-selector`Markus Pettersson1-32/+19
Implement a system built on 'queries' for selecting appropriate relays. A query is a set of constraints which dictates which relay(s) that *can* be chosen by the relay selector. The user's settings can naturally be expressed as a query. The semantics of merging two queries in a way that always prefer user settings is defined by the new `Intersection` trait. Split `mullvad-relay-selector` into several modules: - `query.rs`: Definition of a query on different types of relays. This module is integral to the new API of `mullvad-relay-selector` - `matcher.rs`: Logic for filtering out candidate relays based on a query. - `detailer.rs`: Logic for deriving connection details for the selected relay. - `tests/`: Integration tests for the new relay selector. These tests only use the public APIs of `RelaySelector` and make sure that the output matches the expected output in different scenarios.
2024-01-08Add examples of valid patch filesDavid Lönnhager2-0/+10
2024-01-08Document settings patch formatDavid Lönnhager1-0/+56
2023-12-12Update relay selector documentDavid Lönnhager1-3/+7
2023-12-12Always alternate between random ports and port 53 when using WireGuardDavid Lönnhager1-2/+2
2023-12-12Remove mention of special automatic tunnel protocol logic on Windows,David Lönnhager1-9/+3
and other vestiges
2023-07-07Add obfuscation protocols to relay selector docsEmīls1-6/+31
2023-05-08Add documentation around signing the macOS buildsLinus Färnstrand1-0/+96
2023-03-27Split line to not exceed the 100 character limitAlexander Seiler1-2/+2
Signed-off-by: Alexander Seiler <seileralex@gmail.com>
2023-03-27Fix many typosAlexander Seiler2-2/+2
Signed-off-by: Alexander Seiler <seileralex@gmail.com>
2023-02-28Update docs based on review commentsJonathan1-4/+5
2023-02-28Add documentation for PQJonathan1-0/+24
2023-02-01Update docs for captive portalsEmīls1-5/+11
2022-10-20Update security docsEmīls Piņķis1-0/+8
2022-10-04Document Android leaks reported in MUL22-03Albin1-7/+21
2022-09-27Document Android shortcomingEmīls Piņķis1-2/+2
2022-09-27Update security docsEmīls Piņķis1-5/+20
Due to recent changes to the daemon to prevent early and late boot leaks, the security docs need to be updated to reflect the new behavior.
2022-08-29Allow admin-local v4 multicast range when LAN sharing is enabledDavid Lönnhager1-3/+3
2022-08-15Update relay selector docsJonathan1-1/+4
2022-08-10Update architecture document for Windows offline monitorDavid Lönnhager1-7/+6
2022-05-31Improve architecture documentationEmīls10-7/+198
2022-05-09Update relay selector docs to mention ownershipDavid Lönnhager1-4/+6
2022-05-09Update relay selector documentationDavid Lönnhager1-4/+9
2022-04-26Update relay selector docsDavid Lönnhager1-7/+4
2022-04-05Delete all references to Shadowsocks binariesDavid Lönnhager1-1/+1
2022-01-14Simplify custom resolver to not leak any trafficEmīls3-95/+13
2021-12-13Allow only root to reach the API in blocked stateEmīls1-4/+5
2021-12-10Some more docs workEmīls1-13/+12
2021-12-10Update docsEmīls2-8/+12
2021-12-10Add custom-resolver docsEmīls2-0/+106
2021-12-08Update security document for allowed endpoint fixDavid Lönnhager1-1/+7
2021-12-07Add initial logging and telemetry policyLinus Färnstrand1-0/+70
This is nothing new. The app has done exactly this for a long time. But now it's written down in a policy that's easier for users and developers to find and understand compared to reading the actual code. This is added for transparencys sake and for making it easier to point at during code review.
2021-10-11Update macOS firewall impl to closer match spec around NDPLinus Färnstrand1-5/+0
2021-10-11Update security documentDavid Lönnhager1-3/+7
2021-09-08Update split tunneling docsDavid Lönnhager1-19/+8
2021-06-07Update security documentDavid Lönnhager1-5/+2