Colitu VPN for Windows 2.9.0

Colitu VPN for Windows 2.9.0

• Automatic mode picks the fastest measured server: a server picked by hand is no longer remembered as this network's "good" server, and a remembered server gives way to a freshly measured one that is clearly faster. Old latency measurements are refreshed before an automatic connection.
• Latency is no longer measured through the tunnel when the socket cannot be bound to the physical adapter.
• Invite a friend: a personal link (colitu.com/r/CODE). The invitee gets 7 days of Premium after verifying the e-mail; the inviter gets 7 days when the invitee connects for the first time (at most 10 rewarded invites a month). The code can also be entered at sign-up.
• Anonymous usage statistics (on by default, can be turned off; off deletes queued data): aggregate counters and connection / Adaptive Connect events, stored only as day totals with networks and servers in separate tables. No account, device, IP address or visited site. Details: https://docs.colitu.com/en/anonymous-statistics
• In-app surveys (CSAT, NPS, PMF, cancellation reason), at most one in 30 days, can be turned off.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.6

Colitu VPN for Windows 2.8.6

• Adaptive Connect never picks a server in Russia: automatic mode (recommended server, fallback, warm spare, mid-session switch) leaves out servers whose country is RU, wherever the user is and even when such a server is the fastest or the last one that worked. A Russian exit carries the same blocks the user connects to get around. A server in Russia can still be chosen by hand.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.5

Colitu VPN for Windows 2.8.5

• API certificate pinning: the Colitu API, its mirrors and the endpoint list are reached only over certificates whose validated chain ends at the ISRG (Let's Encrypt) or Google Trust Services roots, so a root certificate installed on the device cannot read sign-in or session traffic. The check ends on 31 December 2027, so an old app never locks itself out.
• Update manifest freshness: latest.json keeps the old signature for older versions and adds signature_v2 over issued_at/expires_at; 2.8.5+ refuse a manifest older than 30 days or past its expiry.
• Independent security review fixes: the kill switch service never deletes an untrusted data folder as SYSTEM and locks down the install folder; support downloads go to an admin-only folder; the elevated app loads no native DLLs from %TEMP% and no startup hooks; the local proxy never listens on the LAN; bounded Shadowsocks link parsing; import accepts share links only; unused legacy code (AmazTool, old main window, unsigned old updater) removed.
• "Only selected apps" mode: DNS of those apps goes through the tunnel.
• Adaptive Connect: a transport that already worked on the current network gets a 90 s penalty after a mid-session stall instead of 10 minutes, so the tunnel returns to it soon after a short UDP block; a dead warm spare is replaced after at most 2 minutes of light traffic; a new network no longer reuses the previous network's memory.
• Adaptive Connect 3.0 parts (start order from anonymous network hints, recovery set for when the API is unreachable) are in the code but switched off in this release.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.4

Colitu VPN for Windows 2.8.4

• A new network is noticed at once: switching to another network on the same adapter (home Wi-Fi to a phone hotspot) left the app saying "protected" for up to a minute and a half while site names did not resolve. It now switches to "reconnecting" within seconds and rebuilds the connection on the new network; the kill switch keeps everything inside meanwhile.
• Account and plan load at start-up after the app was closed unexpectedly: if Windows cannot resolve Colitu's addresses, the app looks them up itself and tries again.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.3

Colitu VPN for Windows 2.8.3

• Name lookups stay inside the VPN on every connection method: with some connection methods Windows kept asking your router's (internet provider's) DNS server while the VPN was on. With the kill switch off your provider could see which sites you visited; with it on, names did not resolve at all and pages loaded slowly or not at all. Every connection method now uses the same tunnel adapter, which answers name lookups itself.
• Warm spare on every connection method: a configuration check refused the spare server on some connection methods, so they ran without one.
• No more "Colitu server unreachable" message at start-up after the app was closed unexpectedly while the kill switch was on.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.2

Colitu VPN for Windows 2.8.2

• Tunnel checks never take another route: the check that confirms the VPN carries traffic (at connect, while connected, after sleep and after a restart) now always goes through the tunnel itself. Before, a split-tunnelling setting ("only selected apps use the VPN", or a bypassed site list) could send that check around a broken tunnel, so the app could report a working connection that was not. Found with a test suggested by an outside reviewer: the tunnel connects but drops everything inside it.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.1

Colitu VPN for Windows 2.8.1

• Local network (precaution): If a connection to a device on your own network (a printer, a network drive, another computer, the router's settings page) ever ends up inside the VPN, it now goes out directly instead of to the VPN server, which cannot reach it. Name lookups still go through the VPN. If the kill switch is set to block the local network, it stays blocked.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.8.0

Colitu VPN for Windows 2.8.0

• Adaptive Connect 2.0: "Fastest server" ranks servers by the ping measured on your network, puts other countries before your own and remembers what worked on each network. Connection methods that most people on your network cannot use are tried last.
• Warm spare: a second path on another server is kept ready while you are connected; if the main path stops working, traffic moves to it within seconds and the VPN stays on. The spare is checked in the background.
• Faster connecting on difficult networks: the best two paths are tried at once; automatic mode moves on to the next server; a failed manual server offers "Try the fastest server".
• Connection watcher on every connection method, automatic reconnect after an unexpected drop.
• Simple mode and Advanced mode (new installations start in Simple mode).
• Messages from Colitu in the app, e.g. close to the monthly data limit.

In a one-hour test with 11 injected failures the connection was available 98.8 % of the time; with the server in use cut for 101 s the user saw a ~5 s pause. Report: https://colitu.com/adaptive-connect

• The kill switch also allows the warm spare server.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.7.0

Colitu VPN for Windows 2.7.0

• Steadier calls on the Fast connection: on servers that support it, the app changes its network port every 30 seconds, so networks that slow down one long-lived connection never see one. If the Fast connection stalls while the internet still works, that server moves to the next connection method for 10 minutes.
• Reachable when colitu.com is not: the app finds the Colitu service through a signed list of alternative addresses.
• Privacy mode by default: new installations send all traffic through the VPN; letting regional sites bypass the VPN is opt-in. Existing installations keep their setting.
• Sign-in code: signing in from an unusual location can ask for a 6-digit code sent to your e-mail.
• Clearer sign-up errors: temporary e-mail addresses, passwords found in known data breaches, too many sign-ups from one network.

Download: https://colitu.com/download · Release notes: https://docs.colitu.com/changelog/windows

Colitu VPN for Windows 2.6.2

Colitu VPN for Windows 2.6.2

• Kill switch fix: with the kill switch on, Colitu could not reach its own server once the Windows DNS cache expired (it blocked name lookups before the tunnel was up), so connecting failed after an 8-second timeout. Colitu now looks up its addresses before the kill switch engages.
• Servers grouped by country: a country with several servers shows one row with the number of locations and the best ping; open it to see the cities. Search lists every match.
• Ad-free YouTube badge on servers where YouTube plays without ads.
• The installer's "Launch Colitu VPN" option works again (it failed with error 740).

Download: https://colitu.com/download · SHA-256 ac5165cfa6bf49f1fa9d170099a3ae890664b1592e4eaf9e0d95ce54052b5845