ExpressVPN宣布开源其Lightway协议核心代码

2021年8月10日,ExpressVPN在其官网博客中宣布,将开源他们的最新的Lightway协议。

开源代码地址:GitHub

同时ExpressVPN官方宣布Lightway 最近还接受了网络安全公司Cure53 的评估。

完整Cure52评估报告地址:Cure52/ExpressVPN Lightway安全审核官网报告

已邀请:

Alcohollll 【熟练级】 - 你看我可爱嘛?

赞同来自: Barry

按照看paper的习惯直接跳到了结论。Cure53给的总结:


To conclude, the scope of the ExpressVPN Lightway protocol assessed by Cure53 in this project makes a relatively robust impression. This holds despite the number of findings listed in this report. It is crucial to observe that the fixes are rather trivial to implement.
Given that not many vulnerabilities were found, it is expected that the implementation should be good for production use once the issues are addressed. It is recommended to frequently look at the code in case significant updates are committed. Ongoing security


大概意思就是虽然有些小漏洞,但是这些修复起来还是比较简单的,而且Lightway这个协议总体上给Cure53的印象不错,期待他再接再厉。


ExpressVPN还是可以的,个人依旧会看好。个人经验在国外表现非常好。

Jason_Fue 【熟练级】 - VPN enthusiastist

所以结果怎么样?

MatLab2 【熟练级】

@jason_fue

The outcomes of this Cure53 assessment, which tackled the ExpressVPN Lightwayprotocol and its connected sources, are generally positive.


期望expressvpn学习mullvad,protonvpn,iVPN。将客户端开源,进一步提升透明度。

估计nord第一时间跟上

我路过

要回复问题请先登录注册