GoVPN – simple secure free software virtual private network daemon

Re:GoVPN – simple secure free software virtual private netwo... by aroch on Friday March 13, 2015 @11:10AM (#9197522)

Not much point in serving .sig's and your PGP key if its over HTTP. Unless you're already in someone's WOT, there's nothing to verify against. At least if you use HTTPS we can somewhat trust that we're being displayed the key you think we should be displayed.

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by draugadrotten on Friday March 13, 2015 @11:34AM (#9197659)

> Unless you're already in someone's WOT, there's nothing to verify against.

Somebody's been trying to fix that with https://keybase.io/

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by tokenizerrr on Friday March 13, 2015 @11:44AM (#9197728)

If anyone is interested, I have 3 keybase invites to hand out. Contact is in my profile.

edit: None left, sorry!

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by fernandotakai on Friday March 13, 2015 @12:33PM (#9198036)

I have 7 invites. contact is also on my profile.

edit: they are all gone.

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by jnthn on Friday March 13, 2015 @02:27PM (#9198909)

I have 5 invites, contact in my profile.

Edit: invite count update

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by mrsteveman1 on Friday March 13, 2015 @02:49PM (#9199100)

I've got 15 more if jnthn's run out :)

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by BostonEnginerd on Friday March 13, 2015 @04:03PM (#9199650)

I also have a pile of invites.

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by rlpb on Friday March 13, 2015 @12:16PM (#9197936)

Indeed; the key used doesn't even appear to be available on any keyserver. However, it does have some use in being able to determine that a newer release was made by the same person as the previous ones. That's something you can't get with HTTPS.

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by eikenberry on Friday March 13, 2015 @04:32PM (#9199851)

Also if they've had it their for a long time you could get some historical verification of it via archive.org.

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by MichaelApproved on Friday March 13, 2015 @11:17AM (#9197560)

For those wondering, I think WOT means "Web of Trust." This seems to be a tool related to that https://www.mywot.com/

[ Parent | on HN ]

Re:GoVPN – simple secure free software virtual private netwo... by tokenizerrr on Friday March 13, 2015 @11:18AM (#9197564)

No, this is referring to the PGP Web of Trust

https://en.wikipedia.org/wiki/Web_of_trust

https://www.gnupg.org/gph/en/manual.html#AEN554

[ Parent | on HN ]