Global-WAN differs in that:

  1. its encryption is compliant and unbreakable forever
  2. no metadata (who/where/when) is available to anyone
  3. security not delegated to US open-source cryptography
     operating-systems, script engines, HTTP servers and
     VoIP servers (and all recurringly expose users to new
     critical security breaches, year after year).

With Enigmabox, "your IP is your identity", which is the
only thing needed to track people, the cryptography is
taken from an open-source library made in an US university
and Microsoft documented its design in 2006.

Enigmabox relies on SIP phones from Grandstream, which
describes itself as a "surveillance specialist" based in
the USA:

http://www.grandstream.com/index.php/products/ip-video-surveillance

In contrast, Global-WAN lets you use regular phones (just
a micro and a loudspeaker, which any ability to send data
on the Internet).

Unsurprisingly, almost everything is done wrong by
Enigmabox - at least from a security point of view.

The open-source project used by Enigmabox is named 'cjdns':

https://github.com/cjdelisle/cjdns/blob/master/doc/security_specification.md

1. it uses a (vulnerable) US cryptographic library
2. it relies on (vulnerable) public-keys for key-exchange
3. it relies on backdoored runtimes (NodeJS, Python, Perl)
    and "off-the-shelves" Operating Systems

The public-key crypto is weakened by using a 16-byte hash
of the user IPv6 address (further identifying users and
easing key-recovery).

The 'password' method is presented as safe while it can't
match the cryptographic entropy requirements. That's a
lot of 'accidental' incoherences for people so concerned
by the security of their users.

Partners are hosted by Cloudflare (a commercial CDN) so
someone is paying the bills (in addition to the costs of
the R&D) for the pleasure of tracking Enigmabox users.

Microsoft Research (not a privacy fan) documented the
design used by Enigmabox... in 2006:
http://research.microsoft.com/pubs/75325/virtualring.pdf

Finally, if you look at the prices (and purchase page)
then its look & like is very similar to Global-WAN's
page:

http://enigmabox.net/en/order/
http://global-wan.ch/en/register.html

But, unlike Global-WAN, they offer to get payments in
Bitcoins (that Global-WAN presents as a trap aimed at
tracking people - something recently confirmed by a
university in Belgium).

This makes you wonder who came first, and to do what:

Enigmabox.net domain has been registered in June 2013
TrustLeap.com domain name was registered in Nov. 2007.

It took us 7 years of R&D to make Global-WAN because
we have rewritten everything in order to deliver real
security.

Clearly not the case of Enigmabox.
-- 

Pierre Gauthier
CEO and President

http://twdi.ch/
http://global-wan.ch/

Paradiesli 17, CH-8842 Unteriberg SZ, Switzerland
Tel +41 55 414-2093, Fax +41 55 414-2067