3 ms·

Forgive me perhaps I read the landing page too quickly but it looks like any other VPN service... I pay a stranger money and my traffic goes through that strang

by plg 9y ago

Forgive me perhaps I read the landing page too quickly but it looks like any other VPN service... I pay a stranger money and my traffic goes through that stranger’s servers? No offense but why would I trust that stranger? Isn’t the best choice for the privacy conscious to set up a VPN on a machine they themselves have physical control over?

justinmayer 9y ago
Thanks for the comments. I don't think it's quite like any other VPN service, at least not that I'm aware of. Fortressa provisions a distinct server, with its own OS, and sets it up as a VPN for you -- and only you. I anticipated questions like those you raised and tried to answer them ahead of time in the FAQ, which admittedly isn't very easy to find at the moment. Having a look at it, does it help answer some of the questions you asked? https://fortressa.com/faq/ https://fortressa.com/faq/
- shakna 9y ago
  I don't think you've really answered the question. Why should I trust you? The FAQ doesn't really inspire any confidence in that.
NamTaf 9y ago
This is slightly different, as far as I can tell. You're essentially paying for a layer that does the work of setting up Algo[1] on a [digitalocean, EC2, azure, GCE] instance for you before sending you the certificates. You pay them, then they pay the VPS instance, an 'admin fee' of sorts and a donation to Algo's ongoing development. The FAQ-cited difficulty of 'setting up your own VPN' basically relies on the end user not realising or feeling comfortable that they could provision Algo directly. You're paying for that, essentially. One thing I'm curious about (and I could be missing the details) is how you guarantee privacy of the certificates generated by Algo being sent to me, the consumer? Do I just have to trust you that you don't keep a copy? [1]: https://github.com/trailofbits/algo https://github.com/trailofbits/algo
leetcrew 9y ago
> Isn’t the best choice for the privacy conscious to set up a VPN on a machine they themselves have physical control over? perhaps I am missing something, but it seems like having physical control over the machine breaks several important use cases for VPNs. if I understand correctly, the privacy that you get from a VPN comes from encrypting the traffic itself, hiding your actual IP, and mixing your traffic with other clients using the same exit point. although it is a matter of record that you are a subscriber, no intercepted traffic can actually be traced back to the IP you own (assuming your provider doesn't keep logs, of course). I don't really see how these qualities could be retained by operating your own VPN server. unless you are doing some black ops shit, your identity would have to be connected to the VPN server itself, so the fact that it masks your computers IP doesn't matter. plus you probably don't have many other people using your server, so you lose that plausible deniability. I would be quite glad to be corrected, as I certainly don't love trusting my provider when they say they don't keep logs.
- earenndil 9y ago
  A VPN can also be useful for security -- for instance, if you're on an unencrypted wifi and someone wants to sniff your packets. Or if you're in countries such as the UK or china and want to circumvent censorship.

by plg 9y ago

justinmayer 9y ago

Thanks for the comments. I don't think it's quite like any other VPN service, at least not that I'm aware of. Fortressa provisions a distinct server, with its own OS, and sets it up as a VPN for you -- and only you. I anticipated questions like those you raised and tried to answer them ahead of time in the FAQ, which admittedly isn't very easy to find at the moment. Having a look at it, does it help answer some of the questions you asked? https://fortressa.com/faq/ https://fortressa.com/faq/

shakna 9y ago
I don't think you've really answered the question. Why should I trust you? The FAQ doesn't really inspire any confidence in that.

NamTaf 9y ago

This is slightly different, as far as I can tell. You're essentially paying for a layer that does the work of setting up Algo[1] on a [digitalocean, EC2, azure, GCE] instance for you before sending you the certificates. You pay them, then they pay the VPS instance, an 'admin fee' of sorts and a donation to Algo's ongoing development. The FAQ-cited difficulty of 'setting up your own VPN' basically relies on the end user not realising or feeling comfortable that they could provision Algo directly. You're paying for that, essentially. One thing I'm curious about (and I could be missing the details) is how you guarantee privacy of the certificates generated by Algo being sent to me, the consumer? Do I just have to trust you that you don't keep a copy? [1]: https://github.com/trailofbits/algo https://github.com/trailofbits/algo

leetcrew 9y ago

> Isn’t the best choice for the privacy conscious to set up a VPN on a machine they themselves have physical control over? perhaps I am missing something, but it seems like having physical control over the machine breaks several important use cases for VPNs. if I understand correctly, the privacy that you get from a VPN comes from encrypting the traffic itself, hiding your actual IP, and mixing your traffic with other clients using the same exit point. although it is a matter of record that you are a subscriber, no intercepted traffic can actually be traced back to the IP you own (assuming your provider doesn't keep logs, of course). I don't really see how these qualities could be retained by operating your own VPN server. unless you are doing some black ops shit, your identity would have to be connected to the VPN server itself, so the fact that it masks your computers IP doesn't matter. plus you probably don't have many other people using your server, so you lose that plausible deniability. I would be quite glad to be corrected, as I certainly don't love trusting my provider when they say they don't keep logs.

earenndil 9y ago
A VPN can also be useful for security -- for instance, if you're on an unencrypted wifi and someone wants to sniff your packets. Or if you're in countries such as the UK or china and want to circumvent censorship.