Re:VPNs are not the solution to a policy problem
by andreyf on Tuesday March 28, 2017 @09:53PM
(#13982646)
Why does he refer to OpenVPN as a "risky server"? Does it have a history of embarrassing security vulns?
[ Parent
| on HN ]
Re:VPNs are not the solution to a policy problem
by analogist on Tuesday March 28, 2017 @10:17PM
(#13982764)
I think a recurrent concern is OpenVPN's reliance on TLS, and its codebase complexity as a result of being built on OpenSSL--but with far less attention and resources and vuln hunting compared to say, actual browsers. Complexity + lack of auditing person-hours is never a good combo. (See https://twitter.com/tqbf/status/806646188158152705)
Matt Green's audit of OpenVPN, when completed, may lead to more light on the matter. Otherwise, we're just relying on informed intuitions.
Re:VPNs are not the solution to a policy problem
by bitexploder on Tuesday March 28, 2017 @10:28PM
(#13982821)
Except all the shenanigans with IPSEC.
https://en.m.wikipedia.org/wiki/IPsec#Alleged_NSA_interferen...
As a "security people" I think me and tptacek could split a great number of hairs and get not too far on this one, but I am open to new info. I know a lot can hide in the complexity of OpenSSL. Maybe the whole thing with IPSEC was to sway us toward OpenVPN likes. Regardless, I still lean slightly towards OpenVPN
But honestly I am out to defeat ad networks. I only aspire to give nation states indigestion (at a mass scale). Individually if a well funded adversary wants any one of us I think they have us.