Re:Vulnerabilities exploited in VPN products used worldwide
by tptacek on Friday October 04, 2019 @05:55PM
(#21162239)
I don't think you'll find a lot of software or cryptographic security engineers who would tell you that you'd be more secure using OpenVPN or strongSwan instead of WireGuard, since the reverse thing is actually true.
[ Parent
| on HN ]
Re:Vulnerabilities exploited in VPN products used worldwide
by labawi on Friday October 04, 2019 @08:39PM
(#21163078)
Do you know anyone who can say specifically what kind of security wireguard provides? Not the NoiseIK Wireguard IKE protocol proven secure stuff¹, but in practice, what can it be relied on to prevent and what does it not prevent?
For example, copying ECN bits was documented only after I bugged Jason about it. In the whitepaper it is mentioned 0 times.
I tried asking on the mailing list, but got nowhere.
¹ The protocol is the foundation. But just because an idealized part is proven secure under some assumptions, doesn't mean the whole is secure, implemented as described or suitable for a particular purpose.