UX: Bitmask’s preference to fail closed is not communicated clearly
One of our reviewers came to the conclusion that Bitmask blocks all Internet traffic when it is not on. This is not actually the case: rather, if Bitmask is unable to connect securely, it “fails closed,” blocking Internet traffic. Recommendation: When Bitmask fails closed, it needs to clearly indicate that it is doing so in its system status bar and its main window. It should say “encrypted internet failed,” and give the user a way to reconnect.
(from redmine: created on 2015-11-17)