Re:Privacy and Security Risks of Android VPN Permission-enab...
by throwanem on Wednesday January 25, 2017 @08:17AM
(#13481137)
In my case, it's because I've found IPSec considerably more of a pain to set up and maintain than OpenVPN, which iOS doesn't natively support. (I don't think Android does, either.)
In the general case, it's because most folks don't have the knowledge and skill required to set up either - nor should they have to.
With the increasing adoption of IoT devices and their generally crap (but not actively malicious) security, it would seem like a no-brainer for ISPs to offer VPN capability on the CPE as part of the basic service package, with UPnP configured to expose on the VPN interface rather than the public one, and with dynamic name resolution included to make configuration an easy one-time process. It'd help with customer retention, I think, and it'd surely improve network stability and throughput by reducing the quantity of attack traffic.
In the general case, it's because most folks don't have the knowledge and skill required to set up either - nor should they have to.
With the increasing adoption of IoT devices and their generally crap (but not actively malicious) security, it would seem like a no-brainer for ISPs to offer VPN capability on the CPE as part of the basic service package, with UPnP configured to expose on the VPN interface rather than the public one, and with dynamic name resolution included to make configuration an easy one-time process. It'd help with customer retention, I think, and it'd surely improve network stability and throughput by reducing the quantity of attack traffic.