How to build your own VPN if you're wary of commercial options

Re:How to build your own VPN if you're wary of commercial op... by aphextron on Friday May 26, 2017 @12:54PM (#14425456)

>The problem with a home-grown VPN is that you lose some of the plausible deniability that's gained from a shared VPN.

Yes, but what good is a VPN where you cannot trust your own network? I would have zero trust in any closed source private VPN. There are ways to gain anonymity from your host that wont require setting up a MITM attack vector for your traffic.

[ Parent | on HN ]

Re:How to build your own VPN if you're wary of commercial op... by greglindahl on Friday May 26, 2017 @01:07PM (#14425581)

I get a lot of value from a VPN that prevents my ISP from spying on my traffic. I see from looking around this conversation that two other people cited this same reason.

I could totally see that many people wouldn't care about this particular thing.

[ Parent | on HN ]

Re:How to build your own VPN if you're wary of commercial op... by cam_l on Friday May 26, 2017 @10:25PM (#14428621)

Not just spying either, but if you are in oz at least, keeping all that metadata in a big, juicy, government mandated, and poorly secured bundle for 2 years!

[ Parent | on HN ]

Re:How to build your own VPN if you're wary of commercial op... by daxorid on Friday May 26, 2017 @01:54PM (#14425937)

VPN is one layer. Filtering all port 80, only permitting TLS, and aggressively paring down your trusted root cert list can effectively mitigate the MITM threat.

[ Parent | on HN ]