3 ms·

Does this mean WireGuard will be moving to stable? My VPN provider has said they won't support WireGuard until it hits 1.0

by 7ewis 7y ago

zx2c4 7y ago
Yes. A 1.0 is now on the horizon.
fmajid 7y ago
Get a better VPN provider. Or better yet, run your own.
- kemonocode 7y ago
  This is what I've advising people with a little bit of know-how to do. Using Algo [0] (If you only need Wireguard and little else) or Streisand [1] (If you need Wireguard in addition to many other things) makes it pretty much trivial. [0] https://github.com/trailofbits/algo https://github.com/trailofbits/algo [1] https://github.com/StreisandEffect/streisand https://github.com/StreisandEffect/streisand
- coldpie 7y ago
  I don't think it's fair to say "better" here. Waiting for stable software releases is a perfectly valid approach. It may not be your approach, which is also fine, but neither approach is better than the other.
  - eeZah7Ux 7y ago
    The end goal here is security. Wireguard has an excellent track record, having a tiny, simple and clean codebase and having been reviewed by many skilled eyes. Most of other solutions don't come close to that.
    - yjftsjthsd-h 7y ago
      I actually do trust WG here, but it is explicitly pre-release software and I would really struggle to fault a provider from avoiding pre-release software. I mean, the WG main page still contains the following (https://www.wireguard.com/ https://www.wireguard.com/): > WireGuard is currently working toward a stable 1.0 release. Current snapshots are generally versioned "0.0.YYYYMMDD" or "0.0.V", but these should not be considered real releases and they may contain security quirks (which would not be eligible for CVEs, since this is pre-release snapshot software). This text will be removed after a thorough audit.
    - kortilla 7y ago
      Every security product has an excellent track record until vulnerabilities are found. Once it hits production and sees a 10000x increase in usage so it becomes a high value target for nation states, then it will be put to the real test.
markosaric 7y ago
Same here. I want to try WireGuard too but ProtonVPN doesn't support it yet. I may reconsider them as my subscription expires next year.
- Diagon 7y ago
  ProtonVPN is involved with funding Wireguard development: https://protonvpn.com/blog/wireguard-donation/ https://protonvpn.com/blog/wireguard-donation/
gruez 7y ago
>My VPN provider has said they won't support WireGuard until it hits 1.0 AFAIK there are some major issues with wireguard that have to be resolved before it's practical for commercial VPNs. https://old.reddit.com/r/PrivateInternetAccess/comments/d1blo2/wireguard_update/ezk41ix/ https://old.reddit.com/r/PrivateInternetAccess/comments/d1bl...
- jeltz 7y ago
  Yeah, there are some issues which makes it harder than it has to be but e.g. Mulllvad has been providing it to their customers for a long time. Required extra work but not insane amounts of it according to a guy at Mullvad who I was talking to.

Does this mean WireGuard will be moving to stable? My VPN provider has said they won't support WireGuard until it hits 1.0

by 7ewis 7y ago

Does this mean WireGuard will be moving to stable? My VPN provider has said they won't support WireGuard until it hits 1.0

zx2c4 7y ago

Yes. A 1.0 is now on the horizon.

fmajid 7y ago

Get a better VPN provider. Or better yet, run your own.

kemonocode 7y ago
This is what I've advising people with a little bit of know-how to do. Using Algo [0] (If you only need Wireguard and little else) or Streisand [1] (If you need Wireguard in addition to many other things) makes it pretty much trivial. [0] https://github.com/trailofbits/algo https://github.com/trailofbits/algo [1] https://github.com/StreisandEffect/streisand https://github.com/StreisandEffect/streisand
coldpie 7y ago
I don't think it's fair to say "better" here. Waiting for stable software releases is a perfectly valid approach. It may not be your approach, which is also fine, but neither approach is better than the other.
- eeZah7Ux 7y ago
  The end goal here is security. Wireguard has an excellent track record, having a tiny, simple and clean codebase and having been reviewed by many skilled eyes. Most of other solutions don't come close to that.
  - yjftsjthsd-h 7y ago
    I actually do trust WG here, but it is explicitly pre-release software and I would really struggle to fault a provider from avoiding pre-release software. I mean, the WG main page still contains the following (https://www.wireguard.com/ https://www.wireguard.com/): > WireGuard is currently working toward a stable 1.0 release. Current snapshots are generally versioned "0.0.YYYYMMDD" or "0.0.V", but these should not be considered real releases and they may contain security quirks (which would not be eligible for CVEs, since this is pre-release snapshot software). This text will be removed after a thorough audit.
  - kortilla 7y ago
    Every security product has an excellent track record until vulnerabilities are found. Once it hits production and sees a 10000x increase in usage so it becomes a high value target for nation states, then it will be put to the real test.

markosaric 7y ago

Same here. I want to try WireGuard too but ProtonVPN doesn't support it yet. I may reconsider them as my subscription expires next year.

Diagon 7y ago
ProtonVPN is involved with funding Wireguard development: https://protonvpn.com/blog/wireguard-donation/ https://protonvpn.com/blog/wireguard-donation/

gruez 7y ago

>My VPN provider has said they won't support WireGuard until it hits 1.0 AFAIK there are some major issues with wireguard that have to be resolved before it's practical for commercial VPNs. https://old.reddit.com/r/PrivateInternetAccess/comments/d1blo2/wireguard_update/ezk41ix/ https://old.reddit.com/r/PrivateInternetAccess/comments/d1bl...

jeltz 7y ago
Yeah, there are some issues which makes it harder than it has to be but e.g. Mulllvad has been providing it to their customers for a long time. Required extra work but not insane amounts of it according to a guy at Mullvad who I was talking to.