Re:Tinc VPN: Secure Private Network Between Hosts
by tptacek on Wednesday February 07, 2018 @01:24PM
(#16326727)
I'd rely on this code before I relied on literally any other VPN codebase. Jason should change the wording here, which I think might be old. Like I said: the protocol just got a set of formal proofs, in addition to the Tamarin prover work Jason did for it.
[ Parent
| on HN ]
Re:Tinc VPN: Secure Private Network Between Hosts
by zx2c4 on Wednesday February 07, 2018 @08:45PM
(#16329531)
I should change the wording there indeed. It's a bit drastic.
Re:Tinc VPN: Secure Private Network Between Hosts
by deeebug on Wednesday February 07, 2018 @01:47PM
(#16326943)
Just because the protocol has a formal set of proofs, doesn't mean it's production ready. The very fact that the only releases are snapshots and not eligible for CVE's makes me weary of utilizing this in a non-testing environment.
Re:Tinc VPN: Secure Private Network Between Hosts
by tptacek on Wednesday February 07, 2018 @02:26PM
(#16327257)
"Not eligible for CVEs" means absolutely nothing.
Re:Tinc VPN: Secure Private Network Between Hosts
by pathseeker on Wednesday February 07, 2018 @03:41PM
(#16327806)
But how does a set of proofs let you know that it's not going to cause a kernel panic or stop forwarding traffic in edge-cases that aren't well-tested (e.g. lossy and/or high-latency links).