Melon VPNSecurity events and explainers
When something breaks in the certificate system, the DNS, or the networks our users depend on, we write down what happened, what it means for you, and what to do — with sources, and without pretending a VPN fixes all of it.
What the network looks like in 2026, and how we measure it
Deep packet inspection, catalogued protocol fingerprints, and certificate authorities as an attack surface. The six tools we use to measure it, what each one cannot tell you, and what we expect next.
The eMudhra CA compromise, explained
Eight intermediate CA keys from India’s eMudhra had 3–8 bits of entropy where 384 were required. Browsers and operating systems have blocked them. What that means for the padlock in your address bar — and what a VPN can and cannot do about it.
Six years of Melon VPN, and the parts we did not change
The domain dates from 2018 and the app from 2019. What changed over six years, what we got wrong — advertising on Android, over-promising on streaming — and why there is still no sign-up screen.