Re:WireGuard Gives Linux a Faster, More Secure VPN
by swinglock on Monday March 02, 2020 @06:34PM
(#22470282)
ZeroTier doesn't permit spoofed MACs unless explicitly configured.
Re:WireGuard Gives Linux a Faster, More Secure VPN
by AceJohnny2 on Monday March 02, 2020 @06:41PM
(#22470334)
and how can they tell?
Re:WireGuard Gives Linux a Faster, More Secure VPN
by api on Monday March 02, 2020 @06:51PM
(#22470404)
MACs are computed directly from cryptographic hashes. For normal ZeroTier P2P traffic the MAC and Ethernet header are elided entirely too, which saves about 14 bytes of per-frame overhead.
Re:WireGuard Gives Linux a Faster, More Secure VPN
by AceJohnny2 on Monday March 02, 2020 @07:44PM
(#22470728)
Wait, are we talking about MAC as in cryptographic Message Authentication Code, or MAC as in ethernet Medium Access Control (addresses)?
Re:WireGuard Gives Linux a Faster, More Secure VPN
by api on Monday March 02, 2020 @08:20PM
(#22470953)
MAC as in 48-bit Ethernet addresses.
https://github.com/zerotier/ZeroTierOne/blob/master/node/MAC...
There's a tiny chance of a collision, but for it to be meaningful you'd have to have a virtual LAN with millions of devices on it.
lol
20 years ago, in college, some folks in the dorm had fun fucking with others at the Ethernet level. Most of us only had experience with the IP level, so couldn't understand what was going on.