IPsec Vulnerabilities and Software Security Prediction

Re:IPsec Vulnerabilities and Software Security Prediction by drzaiusapelord on Tuesday May 19, 2015 @11:37AM (#9570893)

>but does anyone use L2TP/IPSec or IPSec

IPSec is still the enterprise defacto standard. Its pretty much everywhere.

Yeah, it a little different for the FOSS home hobbyist, but for companies with a budget, its a trivial addition to their infrastructure (Cisco, Sonicwall, etc). FOSS IPSec implementations seem to be pretty non-existant in practice from my own experience and I only see FOSS-only shops using OpenVPN, which is OpenSSL based (which, of course, suffered from heartbleed).

[ Parent | on HN ]

Re:IPsec Vulnerabilities and Software Security Prediction by noinsight on Tuesday May 19, 2015 @12:26PM (#9571248)

> I only see FOSS-only shops using OpenVPN, which is OpenSSL based (which, of course, suffered from heartbleed).

Exactly. I'd love to see a simple, auditable and secure open source VPN software. (not OpenVPN)

[ Parent | on HN ]

Re:IPsec Vulnerabilities and Software Security Prediction by riobard on Tuesday May 19, 2015 @01:05PM (#9571539)

Try SigmaVPN and ShadowVPN. Very simple and stateless VPN implementations based on libsodium.

[ Parent | on HN ]

Re:IPsec Vulnerabilities and Software Security Prediction by 616c on Tuesday May 19, 2015 @12:35PM (#9571325)

This is why I ask. I did not want to post it again (I am sure I am not the first), but this is SoftEther thing masquerades as these different VPN protocols while being the same backend.

http://softether.org/

[ Parent | on HN ]