4 ms·

Do you do ANY kind of logging?

• rdl 13y ago
  We do logging on our web server, obviously the support ticket system, our mail server, coupon code redemption, etc. Billing with Stripe -- presumably they keep records for a long time. We don't see your CC, but are notified of payment, etc. (which is why Bitcoin is very attractive to add, and maybe other systems.) The privacy VPN itself currently does zero logging. The best practices seem to be either zero logging or very short retention logging. We'll commit to one of those (but most likely zero logging) soon (working on a very clear and plain language ToS). All the stuff we'd handle with logging is instead done by going out to top-500 sites (or anything reported to us as not working), rather than monitoring use. We don't currently do "anonymization" so web browsing can be an issue. We're looking at that with some kind of opt-in proxy.
  • smegel 13y ago
    > We don't currently do "anonymization" so web browsing can be an issue. What does that mean exactly?
    • bifrost 13y ago
      Browsers leak information. Profusely. We have looked at various ways to solve this, but generally the easiest thing breaks a bunch of other "stuff". We'd like to not break stuff, but still be private. We have a couple strategies but haven't deployed them yet.
      • smegel 13y ago
        We are talking about a VPN here aren't we? Won't anything the browser "leaks" go down the same pipe and get spat out your end? Assuming your using In Cognito and connecting to TLS websites...I can't imagine how there could still be a significant privacy risk.
        • dfc 13y ago
          He means that the browser leaks information to the website that it is connecting to. More info: https://panopticlick.eff.org/browser-uniqueness.pdf https://panopticlick.eff.org/browser-uniqueness.pdf