6 ms·
It might be a good time to mention that Algo VPN now supports Ubuntu 18.04, many new cloud providers, and soon (days) will have Wireguard support. https://gith
by dguido 8y ago
It might be a good time to mention that Algo VPN now supports Ubuntu 18.04, many new cloud providers, and soon (days) will have Wireguard support.
https://github.com/trailofbits/algo https://github.com/trailofbits/algo
- antihero 8y agoWhat advantages does this have over something like OpenVPN Road Warrior installer? https://github.com/Nyr/openvpn-install https://github.com/Nyr/openvpn-install
- tptacek 8y agoIt's packaged and maintained by security experts, and doesn't use OpenVPN.
- antihero 8y agoI see a lot of technologies being talked about that I've not heard of - what's the difference between WireGuard and StrongSwan - do they fulfil different purposes? Or did Algo use StrongSwan and now uses Wireguard?!
- tptacek 8y agostrongSwan is a mainstream IPSEC implementation. OpenVPN is its own protocol, using TLS as a control channel. WireGuard is also its own protocol, based on Noise. strongSwan has cryptography designed in the 1990s. OpenVPN relies on TLS, which for all intents and purposes is also 15-20 years old. WireGuard is modern, with a design that comes from Signal Protocol's cryptographer. strongSwan and OpenVPN have gigantic C codebases. WireGuard's kernel implementation is just 4500 lines of carefully designed code. You should use WireGuard if you can.
- antihero 8y agoCan we use WireGuard on iOS yet? Thanks for the clarifications, by the way.
- pi-rat 8y agoNative support for devices running iOS and MacOS (and others), no need to install a third party client.
- antihero 8y agoFrom the PR it looks like only Android has Wireguard support, or does iOS have it as well?
- nickpsecurity 8y agoWe covered weaknesses of OpenVPN and strengths of Wireguard in this sub-thread: https://news.ycombinator.com/item?id=17092338 https://news.ycombinator.com/item?id=17092338
- fulafel 8y agoFine for browsing pornhub, but it blocks traffic between users, so it's unsuitable for many general net use cases.