News for hackers. Stuff that matters.

A comment on Do you need a VPN?. Parent comment

Re:Do you need a VPN? by hultner on Monday October 30, 2017 @01:20PM (#15586919)
Isn't openvpn kind of a hack and a IKEv2/IPSEC based strongswan solution to prefer?
[ Parent | on HN ]
Re:Do you need a VPN? by mirimir on Monday October 30, 2017 @07:20PM (#15589872)
It's arguably no more a "hack" than TLS is one. Right?

Re OpenVPN vs IKEv2/IPSec, this IVPN FAQ seems accurate.[0] But then, I helped edit it, so I'm biased. Still, if anyone can point to inaccuracies, I'll recommend fixing them :) The major weakness is pre-shared IKE keys.

On the other hand, I get from IVPN that the IPSEC implementation in iOS is very secure.

0) https://www.ivpn.net/knowledgebase/160/Is-using-L2TPorIPSec-...

[ Parent | on HN ]
Re:Do you need a VPN? by joecool1029 on Monday October 30, 2017 @02:40PM (#15587721)
Don't see why you're getting downvoted. From a user standpoint, IKEv2 doesn't require a secondary client and integrates with most major OS better.

For example: It's way easier for a client to install a mobileconfig to ios that supports on demand VPN than it is to have them download and configure openvpn. Fairly set and forget.

[ Parent | on HN ]
Re:Do you need a VPN? by JetSpiegel on Monday October 30, 2017 @04:40PM (#15588687)
IKE is a nightmare to admin, only for Cisco level bureaucracies.
[ Parent | on HN ]
Re:Do you need a VPN? by MichaelGG on Monday October 30, 2017 @06:24PM (#15589507)
OpenVPN protocol is sorta weird (I wrote a clean room client and server impl). But IPSec stuff is such a pain to deal with that it is not worth it despite it having better OS integration.
[ Parent | on HN ]