I've been a happy PIA subscriber since the Snowden controversy. However every time I see them becoming more popular (at least 4 of my friends have signed up with them in the past few weeks) and earnestly trying to make themselves more secure, I also realize that someone, somewhere within the NSA (and yes, other intelligence agencies around the world) is elevating them on a list of VPNs to break.
While I've heard good things about PIA, you're still trusting someone else with your data. Whether you trust them or not is entirely up to you, but it's not that hard to set up your own VPN tunnel. We posted about it a few weeks ago here: <a href="https://www.tinfoilsecurity.com/blog/dont-get-pwned-on-public-wifi-use-your-own-vpn-tutorial-guide-how-to" rel="nofollow">https://www.tinfoilsecurity.com/blog/dont-get-pwned-on-publi...</a>, and there was some good HN discussion on it here: <a href="https://news.ycombinator.com/item?id=6285458" rel="nofollow">https://news.ycombinator.com/item?id=6285458</a>
Note: ECC-521 is not a typo. It is really 521-bit curve.<p>Standard: <a href="http://www.secg.org/collateral/sec2_final.pdf" rel="nofollow">http://www.secg.org/collateral/sec2_final.pdf</a><p>Explanation: <a href="http://crypto.stackexchange.com/questions/6219/why-do-the-elliptic-curves-recommended-by-nist-use-521-bits-rather-than-512" rel="nofollow">http://crypto.stackexchange.com/questions/6219/why-do-the-el...</a>
I use this service, and have been thrilled with it for a long time. They do no logging whatsoever, and their encryption and endpoint options are great.<p>they are also by far the cheapest truly secure option in this space - $40/year
FYI, this is the info page for our new (beta) OpenVPN based client which supports multiple encryption options:<p><a href="https://www.privateinternetaccess.com/forum/index.php?p=/discussion/1724/encryption-now-it039s-in-your-control-beta" rel="nofollow">https://www.privateinternetaccess.com/forum/index.php?p=/dis...</a>
Pretty bogus preset choices, what is this? If the provider isn't providing the expertise to ensure a safe connection for every customer, what the hell are they doing?