Macworld (USA)

AIRVPN: Excellent service that power users will love

An excellent service with a known history, a solid network, and very good speeds.

- BY IAN PAUL

AIRVPN is a popular service among privacy-conscious users. The VPN is well known for transparen­cy about its network, reasonable costs, and attention to privacy. It’s not a perfect service, but it’s well worth considerin­g for anyone who wants to ensure a good amount of anonymity.

AIRVPN started life in 2010 as a free project developed by privacy-conscious “activists, hacktivist­s, and hackers,” according to the VPN’S about page (go. macworld.com/abpg). It then became its

own entity with a dedicated company around 2012.

Currently AIRVPN offers connection­s in 21 countries, with 240 servers. Anyone who wants to see the status of all of AIRVPN’S servers can head to the Status page (go. macworld.com/stpg) on the company’s website. Here you’ll see each server location to the city level, current load, and even the number of users on that server. At the top of the page there are some even more interestin­g topics such as the top 10 user speeds, the 10 servers with the highest amount of user traffic, and the top 10 user session times. There’s also a pendingiss­ues section showing servers with any issues. You can see, for example, that the Ross server located in Montreal is experiment­ing with the Chacha20 cipher.

This is an amazing amount of transparen­cy from a VPN service, and power users will appreciate the data.

SECURITY, SOFTWARE, SERVERS, AND SPEED

AIRVPN displays what it uses for VPN connection­s on its Technical Specs page (go.macworld.com/tcpg). Here we can see that AIRVPN uses OPENVPN as the protocol, and only OPENVPN. AIRVPN tells us it is experiment­ing with Wireguard, but it won’t put the newer protocol into production until some of the technical and privacy concerns it has are addressed. You can read more about the issues in this AIRVPN forum post (go.macworld.com/arfp).

AIRVPN’S Data encryption uses AES256-GCM by default, and the specs page

displays the order of negotiatio­n for other ciphers. The control channel default is TLS-DHE-RSA-WITH-AES-256-GCMSHA384.

AIRVPN doesn’t publish any informatio­n about its team, but it does name Paolo Brini as its point of contact. Brini is known as a hacktivist based in Italy, and AIRVPN’S headquarte­rs are in Perugia, Italy. There isn’t much informatio­n about Brini, but he does have a Twitter presence that promotes informatio­n about AIRVPN. I asked AIRVPN about the team’s anonymity and Brini responded from the generic AIRVPN email address with this response: “Personal data and privacy protection of our personnel…is important for us and arguably for any company supporting NGOS in countries controlled by human rights hostile regimes or by criminal organizati­ons. In such countries, or some areas of those countries, it’s not infrequent that activists and journalist­s are imprisoned without trial, tortured or killed.… We follow a nondisclos­ure policy: the choice to disclose any relation with AIRVPN is up to each person.

Working for or with AIRVPN might be potentiall­y dangerous in a few countries.”

To sign up for AIRVPN, you supply an email, username, and password—fairly standard for VPN services. The privacy policy says an email address is not required, but the sign-up page says otherwise.

I asked AIRVPN about this and the response was that an email address wasn’t required; however, when I entered a nonsense address into the email address entry box, I was denied an account several times. It was only when I used a legitimate email address that I was able to get an account. In practical terms, an email address is required despite what the privacy policy says.

AIRVPN’S primary applicatio­n is called the Eddie user interface. It’s a very basic

window with the informatio­n necessary to connect to the VPN. There are no maps or clearly marked buttons to help you figure it out. It’s not that it’s an impossible task to get it working, but it doesn’t have the friendlies­t interface, and I wouldn’t recommend it to novice users.

For Mac users, the app doesn’t offer an option to copy it over to the Applicatio­ns folder, so you’ll have to do that yourself.

At first I couldn’t figure how to access the app’s primary window, but eventually I saw that it’s accessible from the status area in the menu bar. The app has six tabs: Overview, Servers, Countries, Speed,

Stats, and Logs.

The primary Overview tab is where you log in with your user account. The Servers tab shows all available servers in the network with a solid amount of informatio­n about each one. The app displays the nickname of each server, its location, latency in millisecon­ds from your location, and the current server load. That is just fantastic. This tab also displays an amber/green indicator so you can see at a glance whether a server is recommende­d for you. Both the Servers and Countries tabs also have a Users column showing exactly how many people are using each server or country location depending on the tab. Moving over to the Countries tab, the app shows the country name, number of servers in that country, and general load, as well as an amber/green indicator. On the right rail of the Countries tab you’ll see a green checkmark, a red “X,” and a blank box. Highlight a country and click the green checkmark, and that country’s servers will appear in the Servers tab. It’s more or less a favorites option, and you can select as many countries as you want.

Click the red “X,” however, and that country disappears from the list (most people won’t want to do that). To remove the green checkmark from a country, you need to click the blank box.

Selecting a country does not connect you to a VPN server. For that you have to pick the server you want in a given country by going back to the Servers tab. Connect

to a server by highlighti­ng it and selecting the icon in the right rail that looks like it means “sign out” (a right-facing arrow pointing into a square bracket). Again, there are also the checkmark, “X,” and blank box icons. There’s also a Refresh icon to get new informatio­n about ping times and load.

Power users in particular should appreciate the ability to use a VPN with all the informatio­n they could ever want about the various locations, right down to the number of users on a given server.

Now, you might be asking what the privacy policy is like given that the service supplies so much informatio­n, including active user count on a given server. First, AIRVPN tells us all of that top 10 data is just real-time stats that come from running an OPENVPN server. “The ‘Top 10 Users’ are extrapolat­ed from all the data of all the daemons running in the various servers,” AIRVPN told us. “No user personal data is collected as OPENVPN real time stats are tied to a client session, and a client is identified by the certificat­e/key pair. Data is not stored, it remains in RAM: when a client disconnect­s (or a daemon stops) even the stats are lost.”

AIRVPN’S privacy statement says that the service keeps all the user data it needs to do its job in RAM, and only when it’s “necessary to provide the service.” AIRVPN does not log or inspect user web traffic, browsing history, and so on, nor does it store or log user IP addresses in a longterm storage device.

AIRVPN also takes a number or precaution­s to safeguard user data, including encryption. You can read about those precaution­s on the AIRVPN site.

Now let’s get to those speeds. They were simply fantastic. In tests across three days, five countries, and multiple runs, AIRVPN maintained a smidge over 42 percent of the base speed. There wasn’t a single country where I could complain about the speed. AIRVPN’S performanc­e was excellent overall.

PRICING

AIRVPN has a large number or pricing tiers, and all prices are in euros. A three-day trail costs €2, one month is €7, three months is €15, six months is €29, a full year is €49, two years is €79, and three is €99. Those are very good prices, amounting to an average yearly subscripti­on of about $5 per month (€4.23 at this writing).

AIRVPN accepts payment via Paypal, credit card, or direct cryptocurr­ency transfer, but has no cash payment options.

BOTTOM LINE

AIRVPN is very good, especially for power users.

The speeds are above average, the prices reasonable, and the applicatio­n is serviceabl­e. AIRVPN is also really transparen­t, with its service showing a lot of informatio­n about the network, and the privacy policy is acceptable.

AIRVPN is a good choice for privacycon­scious users, though it doesn’t offer the amount of privacy and anonymity you can get with a service like Mullvad (go.macworld.com/mu11), which generates a random account number for you and gives you the option to pay in cash.

We’d also like to see AIRVPN be more transparen­t about who’s running the show. The argument about activists in other countries is understand­able, but numerous VPNS still manage to put a truly public face on their companies even though they service vulnerable people living under repressive regimes.

Still, AIRVPN is an excellent product, and power users who don’t mind a user interface that’s a little rough around the edges will find a lot to like. ■

 ??  ??
 ??  ?? AIRVPN’S Status page offers a wealth of informatio­n.
AIRVPN’S Status page offers a wealth of informatio­n.
 ??  ?? AIRVPN server options for the U.S. and UK.
AIRVPN server options for the U.S. and UK.
 ??  ?? AIRVPN’S applicatio­n window is accessible from the status bar on macos.
AIRVPN’S applicatio­n window is accessible from the status bar on macos.
 ??  ?? AIRVPN’S Countries tab.
AIRVPN’S Countries tab.
 ??  ?? The Overview tab in AIRVPN’S Eddie user interface.
The Overview tab in AIRVPN’S Eddie user interface.

Newspapers in English

Newspapers from Australia