So I've been posting about Surfshark a bit lately, not only because I use it and I like it, but also because they've been actively releasing important news about their software. But I didn't really expect to see this:
Surfshark audit reportAs far as I understand they went through this audit willingly, and I haven't seen a VPN do that before. Both minor vulnerabilities are tied to HTTP conversion to https, and though I don't like the first one (where they send an e-mail with HTTP reference), these aren't any serious accusations. Overall feedback is positive, nothing about keeping any logs at all. I trusted their services anyway, but I'm interested if these audits can become more common? Not only can it be used to discover unknown flaws in the software, but it also helps to inform the public about the quality of the product. I know TunnelBear just went through a similar audit, any more VNS announced something alike?
