PIA open-sources and announces audit plans
> We encourage everyone NOT to trust, but instead, to verify.<p>I love this.  I also don't know how you could possibly make it work.<p>> We’re building an internal roadmap...<p>Keyword: Roadmap<p>Translation: We haven't started on this, but it's something we think we want to do so we're going to start talking about it.<p>> ...to create a transparent and verifiable infrastructure...<p>How is a user supposed to verify the infrastructure?  Do you mean you're going to hire a third-party auditor and ask users to trust their verification?<p>I mean, that's better than nothing but it doesn't exactly enable <i>everyone</i> "not to trust, but instead, verify."  In this scenario, the auditor is the only one doing the verification.<p>> ...in which no one, including ourselves, is permitted access to the servers through which VPN traffic flows.<p>Then how do you deploy the servers in the first place?  How do you identify and handle hardware and software failures?  How are you defining "access" such that this idea is possible?