News for hackers. Stuff that matters.

A comment on Detailed VPN Comparison Chart. Parent comment

Re:Detailed VPN Comparison Chart by Freak_NL on Wednesday January 18, 2017 @09:51AM (#13426646)
> I use AirVPN because to me it matters the client is open source.

Don't most VPN providers offer OpenVPN as an option? Private Internet Access does. I always assumed that the client offered is to have an easy setup method for users who don't know how to configure a normal VPN client safely.

[ Parent | on HN ]
Re:Detailed VPN Comparison Chart by subliminalpanda on Wednesday January 18, 2017 @01:19PM (#13428739)
It's been a while but the last time I used PIA I noticed that their configurations were woefully insecure (BF-CBC Ciphers, no tls-auth, pre-shared keys instead of certificates). This was maybe a couple of years ago.

Has that changed recently?

[ Parent | on HN ]
Re:Detailed VPN Comparison Chart by PTRFRLL on Wednesday January 18, 2017 @01:26PM (#13428819)
Yes, they recently updated their OpenVPN configuration and now have a 'strong' OpenVPN config option.

>All our servers are now running OpenVPN on UDP port 1197 with our 4096bit RSA server certificate, 4096bit Diffie-Helman key exchange, AES-256-CBC, SHA256 and TLS v1.0-1.2 support.

https://www.privateinternetaccess.com/forum/discussion/20093...

[ Parent | on HN ]