New widget build released just now, v3.13.
Those of you on v3.12, you should get a prompt informing you of the new version then asking you if you want to upgrade.
For anyone else not already using the widget (or using < v3.12), it's available at https://cryptostorm.is/cryptostorm_setup.exe
with hashes @ https://cryptostorm.is/cryptostorm_setup.exe.txt
Included in this latest widget is access to the new ECC (Elliptic-Curve Cryptography) instances, which use the strongest available crypto OpenVPN 2.4.x has to offer. You can turn on this feature by going to Options -> Security and selecting the "Use ECC instances" checkbox. Only for 64 bit Windows, since these features require OpenVPN 2.4.x, which has dropped support for 32 bit Windows.
The server/CA certificate for these instances is also using EC, which means smaller key size with better (or equivalent) crypto, which generally means better speeds.
More info about these instances can be found at https://github.com/cryptostorm/cryptost ... master/ecc
and if you want to learn more about the specific configuration directives used, there's comments on almost every line of each of those configs explaining them.
Also included is a killswitch! You can turn it on under Options -> Security then clicking "Enable killswitch".
It'll turn on when you press the Back button to go back to the main window.
It uses Windows firewall to block everything except our VPN server IPs and our DNS IPs, so if your internet disconnects or your connection to the VPN is severed, you won't leak anything to the internet.
Of course, since this is Windows, I would still recommend using an external device to implement your own killswitch on your router/firewall, since it's known that Microsoft has the ability to remove firewall rules remotely.
The other changes are mostly bug fixes, such as better handling of DNS settings when switching to/from dnscrypt-proxy. This should fix the problem people were having where DNS was getting left at 127.0.0.1 after exiting the widget.
Source code is up at https://github.com/cryptostorm/cstorm_w ... /client.pl
if anyone's interested.