Private Internet Access VPN (PIA)

I'd like to hear opinions on them. Are they worthy of being added to the list of trustworthy vendors in here ala Mullvad, Air, etc... ?

 

The Redditors love it.

 

I think so.

I had been critical because they don't use client.crt/client.key, and authenticate users only via username and password. But now I see that it's not problematic for users. In man openvpn:

The warnings "using this directive is less secure" and "potentially compromise the security of your VPN" aren't relevant for VPN services. For enterprise VPNs, preventing unauthorized access is essential. For VPN services, the only risk is losing bandwidth to freeloaders.

There's another issue about client.crt/client.key: some VPN services provide user-specific certificates. That simplifies denial of access to expired or nuked users. But it also reduces user anonymity in logs.

 

There is already a discussion here:

https://www.wilderssecurity.com/showthread.php?t=357319

In one week my one month subscription is going to expire, but I am so happy that I am going to renew for one year.