Well, almost!
https://www.kuketz-blog.de/grapheneos-warum-android-eine-verbindung-zu-gstatic-com-aufbaut/
rethinkdns
@rdns
- 1,061 Followers
- 46 Following
- 304 Posts
🎁 Open source firewall for Android with WireGuard. 💙 kt, js, go, rs. 🇮🇳 India.
Rethink (the code) does not contact gstatic (or its subdomains).
The app dependencies (ex: Google Pay, Crashlytics) might, but we are not aware if it does.
---
In Loopback mode, most (only connectivity checks, if enabled, is not) traffic from Rethink is subject to DNS & firewall rules. The traffic should hence also be attributed to it as if Rethink was any other regular app.
Traffic attribution (on apps or on apps using Download Manager), depends on the OS impl.
@navigatrix No, F-Droid will never have Crashlytics.
The only "Firebase stuff", in other flavours (Play Store / GitHub) we have is Crashlytics and nothing else.
@reverend @tarnkappeinfo Gotcha. The article compares Rethink w/ Tailscale & Mullvad, which is apples to oranges but:
Tailscale uses AWS & Fly.io, both of which are US based; but derides Rethink for doing so
Mullvad, is mandated by Swedish law, to retain KYC for 7yrs; & is also subject to both Swedish & EU laws which require "secret" logging by VPNs in criminal cases, which Mullvad said they'll abide by. Yet, demeans Rethink's Windscribe (Canada) integration as it is in "5-eyes"
It's not fair
GrapheneOSAndroid was successful due to being open source and an open platform. Google chose that approach to catch up and get near universal adoption by OEMs and carriers. They've gradually phased in illegal anti-competitive practices making it into a bait and switch. They can be forced to roll it all back.
@bsm one week ago. We're on v055x now (and probably a v055y and v055z coming in the next weeks with some more quality-of-life patches): https://github.com/celzero/rethink-app/releases/tag/v0.5.5x
@reverend @tarnkappeinfo I'm sorry, what does the article "prove"? We like to think we run this project as transparently as possible, so it is surprising folks find things strange. In fact, we have gone way out of our way to let users firewall Rethink with Rethink as if it was any regular app, just so they could block Crashlytics (even though it is opt-in). Note that, the F-Droid flavour doesn't have Crashlytics built-in.
Amit Pundir 
RE: https://mas.to/@fossunited/116764403596781611
The CFP deadline for the AOSP devroom at #IndiaFOSS 2026 has been extended by two weeks and will now close on 28 June 2026 (Sunday). Looking forward to your submissions!
@Digitalmarketing @kuketzblog Thanks. We made some more improvements to WireGuard Automation in v055x, will you test, if you're comfortable doing so?
And we'll continue to make more amends in v055y (if more bugs are reported). Network-based WireGuard Automation is high on our priority list.
@DiWoWo @kuketzblog You can check the network-reported DNS endpoint (via DHCP, for example) in "About -> General" (scroll to the section named "VPN Stats") and look for "dns: ..."
In its default setting, Rethink isn't hard-coded to connect to 8.8.8.8 anymore for any reason. If it is, that's a bug we'd want to rectify.