4 ms·
Why does he refer to OpenVPN as a "risky server"? Does it have a history of embarrassing security vulns?
by andreyf 10y ago
Why does he refer to OpenVPN as a "risky server"? Does it have a history of embarrassing security vulns?
- bdarnell 10y agoI think "other risky servers" may refer to the lesser-known servers that streisand includes, like shadowsocks.
- deleted 10y ago[deleted]
- analogist 10y agoI think a recurrent concern is OpenVPN's reliance on TLS, and its codebase complexity as a result of being built on OpenSSL--but with far less attention and resources and vuln hunting compared to say, actual browsers. Complexity + lack of auditing person-hours is never a good combo. (See https://twitter.com/tqbf/status/806646188158152705 https://twitter.com/tqbf/status/806646188158152705) Matt Green's audit of OpenVPN, when completed, may lead to more light on the matter. Otherwise, we're just relying on informed intuitions.
- bitexploder 10y agoExcept all the shenanigans with IPSEC. https://en.m.wikipedia.org/wiki/IPsec#Alleged_NSA_interference https://en.m.wikipedia.org/wiki/IPsec#Alleged_NSA_interferen... As a "security people" I think me and tptacek could split a great number of hairs and get not too far on this one, but I am open to new info. I know a lot can hide in the complexity of OpenSSL. Maybe the whole thing with IPSEC was to sway us toward OpenVPN likes. Regardless, I still lean slightly towards OpenVPN But honestly I am out to defeat ad networks. I only aspire to give nation states indigestion (at a mass scale). Individually if a well funded adversary wants any one of us I think they have us.