Beyond stunnel: High-speed, secure connections across the public Internet

Re:Beyond stunnel: High-speed, secure connections across the... by strags on Wednesday February 22, 2012 @01:31PM (#3621900)

One question that isn't in the FAQ that I would instantly be concerned about is exactly what encryption mechanism is used, and where the private keys are stored. Specifically, are they stored in vCider's database?

If my goal was to set up a secure tunnel, I'd be incredibly wary of using a closed source solution like this. Even if you're not worried about the government secretly demanding access to your keys, you might reasonably be concerned about vCider getting hacked.

[ Parent | on HN ]

Re:Beyond stunnel: High-speed, secure connections across the... by jbrendel on Wednesday February 22, 2012 @01:57PM (#3622009)

Indeed, the keys are centrally created and (briefly) stored. However, they are also changed frequently and historic (older) keys are not kept on record. So, if someone intercepts a bunch of your traffic and then wants to hack or demand our database, they would have to hurry since the older keys are not kept around.

However, I understand your concern. We are thinking of ways to address this in an even more comprehensive way.

[ Parent | on HN ]

Re:Beyond stunnel: High-speed, secure connections across the... by jbrendel on Wednesday February 22, 2012 @02:11PM (#3622058)

Sorry, I forgot to answer this: vCider uses AES 256.

[ Parent | on HN ]