summaryrefslogtreecommitdiff
path: root/static/features.html
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2021-05-24 09:17:14 -0400
committerDaniel Micay <danielmicay@gmail.com>2021-05-24 09:24:28 -0400
commitef33f88d803f0c5e04b101d153080ae04444b3dd (patch)
tree867cd56561ac13b6b9b591a7ad2ad93984601b94 /static/features.html
parent16d1b072e08d309361fb968a5a882429d3ea4dc5 (diff)
document DHCP privacy improvement
Diffstat (limited to 'static/features.html')
-rw-r--r--static/features.html10
1 files changed, 6 insertions, 4 deletions
diff --git a/static/features.html b/static/features.html
index d3bf52ba..c1b8796f 100644
--- a/static/features.html
+++ b/static/features.html
@@ -204,10 +204,12 @@
<li>PIN scrambling option</li>
<li><a href="/usage#lte-only-mode">LTE-only mode</a> to reduce cellular radio
attack surface by disabling enormous amounts of legacy code</li>
- <li><a href="/usage#wifi-privacy-associated">Default enabled per-connection MAC randomization</a>
- as an improvement over Android's default per-network MAC randomization reusing
- the same MAC address until the DHCP lease with that network expires (can still
- use the standard implementation or fully disable it)</li>
+ <li><a href="/usage#wifi-privacy-associated">Per-connection MAC randomization
+ option (enabled by default)</a> as a more private option than the standard
+ persistent per-network random MAC.</li>
+ <li>When the per-connection MAC randomization added by GrapheneOS is being
+ used, DHCP client state is flushed before reconnecting to a network to avoid
+ revealing that it's likely the same device as before.</li>
<li>Vanadium: hardened WebView and default browser — the WebView is what most
other apps use to handle web content, so you benefit from Vanadium in many apps
even if you choose another browser</li>