Added
- Add a new access method: Domain fronting. Domain fronting is a way to reach the API via
proxies. The access method is enabled by default. - Publish software bill of materials (SBOM) along with the GitHub release.
Changed
- Require the post-quantum X25519MLKEM768 key exchange for TLS connections to the Mullvad API.
- Disable TLS session tickets to reduce the ability to track clients over time.
- Replace grpc-java with wire as grpc library.
- Update LWO to improved v2 protocol.
- Improve obfuscation performance by using GotaTun. This mainly affects Shadowsocks.
- Move notification permission request dialog prompt to the connect screen.
- Improve how the quick settings tile shows the connection state.
- Improve daemon log rotation by automatically rotating after 7 days or if files reach 2GB,
the latter having been more of an issue on desktop than on Android.
Removed
- Remove the initial privacy consent screen. The app now shows the Login Screen on first start.
The privacy policy can still be reached from Settings.
Fixed
- Blocking DNS queries related to connchecks during the ephemeral peer handshake caused tunnel setup
to fail on some devices. - Add workaround for Android failing to restart the VPN app after app upgrade.
- Fix relay list and custom lists sorting by respecting locales.
- Ensure cached routes are cleared before setting up new tunnels.
- Improve detection of IPv6 connectivity.
- Fix a bug where password managers could save the account number as hidden dots.