In the wake of the Proton controversy, I've been looking towards alternatives towards their services. Unfortunately, I can't seem to find a good alternative to ProtonVPN. I'm looking for the following in a VPN service:

  • Port forwarding support
  • Open source
  • Android app and Firefox extension available
  • Relatively cheap, around $3-4 month (okay with annual pricing)

The only options I found were Private Internet Access and Windscribe, but I found issues with them. If I'm cutting ties with Proton based on ideals I disagree with, I should be rejecting alternatives on the same basis.

Based on what I saw in the PIA subreddit, Private Internet Access seems to have some issues with service reliability and concerns about its ownership having ties to Israel, implying Zionist affiliation. Windscribe seems to have better service, but they have had a questionable social media history: edgy marketing including an AI-generated Hitler and a controversy where, according to them, they joked about a guy being mentally ill but their post easily looked like they were saying trans people are mentally ill.

Is there an option I missed? Should I try one of these options despite their faults? I'd like to know your thoughts.

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 7 hours ago (1 child)

If you are using 9.9.9.9 as a DoH provider, then afaik you wouldn't be using Cloudflare DoH anymore. Cloudflare isn't an https proxy for DoH. Cloudflare handles the DoH directly.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 6 hours ago

    I had them confused, CF is the target, not the proxy. The proxy would be another server, like SURF

    You can use your ISP's IP for DNS and the Oracle proxy for the requests.

    SURF sees CF ODoH request for example.com

    CF sees an encrypted DoH request to SURF from your ISP's address

    example.com sees a request from Oracle

    Oracle sees a request to the IP of example.com and encrypted packets from the ISP IP

    Cloudflare (now as host) gets a request from Oracle's IP with ECH SNI pointing to example.com

    Nobody actually knows you went to example.com and not some other cloudflare site

  • source
  • parent