Hacker News Reader

This is a good way to target individuals too. If know someone uses wireguard and has it set to automatically connect except when on their home wifi, you can pretend to be their home wifi to lure them into a false sense of security.

I would contend that this is a problem with wireguard. It shouldn't be trusting the name of the wifi network.

View on HN

Commenting from the perspective of iOS and its configuration profiles, you can configure them to match based on an HTTP connection (among other things). I haven't tested it (yet, I think I know what I'm playing with tomorrow), but if the URL is one that would require a TLS connection I would hope that iOS is checking that certificate. If it is and the domain of the URL is one you control that could be a way to implement the check (assuming that URL is also only available on networks you trust).

I just keep Wireguard on even when on my home network. With NAT Loopback on the router this works fine. Is there a reason to have it off?

Wireguard kills the battery on my phone so I like it off when I’m home.

Also my wireguard box isn’t fast enough to handle gigabit speeds so on my home network it slows things down too much.

Reply on news.ycombinator.com