The original post: /r/mullvadvpn by /u/RoastedRaptor on 2024-10-08 01:03:58.
As a long-time Mullvad user, I have nothing but respect for the company’s transparency, fair pricing, and commitment to privacy. Their dedication to open-source software, no-logs policy, and refusal to collect personal information puts them a step ahead of many competitors in the VPN space. It’s rare to find a service that truly aligns with its users’ values, and Mullvad consistently delivers on this front.
However, despite my admiration for the desktop apps, I have to express my frustration with the iOS app. Compared to the desktop experience, the iOS app falls short in some crucial areas, especially when it comes to security features. Most notably, it lacks a kill switch and the option to block local network (LAN) access. These are fundamental features for ensuring a high level of security, especially when the connection drops unexpectedly.
Recent security incidents, like the TunnelCrack vulnerability reported in 2023, highlight the importance of blocking LAN access while connected to a VPN. TunnelCrack demonstrated how attackers could exploit VPN users by tricking devices into sending traffic through local networks or unencrypted tunnels, bypassing the VPN entirely. Without the ability to block local network access, Mullvad’s iOS app leaves users exposed to these kinds of threats, especially on public Wi-Fi or shared networks.
I do understand that Apple places certain restrictions on VPN apps, and Mullvad’s hands may be tied to some extent. However, other VPN providers have managed to implement these features on iOS for years now, which makes me wonder if there’s a chance Mullvad could find a way to add them soon.
From what I understand, some of these issues might be solvable. For example, while there’s no kill switch, you can enable the Mullvad Proxy , which works as a partial solution. But until Mullvad adds the option to block LAN access directly within the app, users remain vulnerable to threats like TunnelCrack.
I truly hope Mullvad can find a way to overcome these limitations or work within the constraints to offer a more secure and feature-rich experience on iOS. Until then, while I’ll continue using and supporting them, the iOS app remains a significant weak point that needs urgent attention.