5 ms·

Using easy-rsa, choosing the right ciphers and other protocol options always seemed overly complex and opaque to me. Wireguard was a breath of fresh air in comp

Using easy-rsa, choosing the right ciphers and other protocol options always seemed overly complex and opaque to me. Wireguard was a breath of fresh air in comparison.

xrisk 7y ago
There are multiple setup scripts like [1] that make it super easy to setup OpenVPN. [1] https://github.com/Nyr/openvpn-install https://github.com/Nyr/openvpn-install
- Avamander 7y ago
  Makes it super easy but even more opaque, that is not a good thing with incredibly security-related software.
  - xrisk 7y ago
    Isn't it common advice to not roll your own crypto? If this software has sensible defaults, I see no problem with using it.
    - Avamander 7y ago
      It is, but with this script it's a third party rolling their own crypto for you :D. OpenVPN should have good defaults instead.