[matthews2]

> Mullvad is one of the non-logging VPN providers

How do you know that they're not logging? Or that their ISPs are not logging?

[clsec]

Here's the latest Mullvad security audit (June 2020).

https://cure53.de/pentest-report_mullvad_2020_v2.pdf

[odensc]

Unless I'm mistaken that's just a security audit of their client applications, which would not in any way prove that they aren't logging.

[clsec]

You are correct. I don't use Mullvad and had assumed this was an audit of their infrastructure, not their app. Thanks for pointing that out.

[6c737133]

I don’t believe there’s any way to completely validate any service providers claims - there’s always a bit of trust required

That said, mullvad facilitates fully anonymous signup and payment, if you’re so inclined… so in that regard even if they’re secretly logging, if your OPSEC is up to par then it’s fairly moot.

Just my 0.02$