4 ms·

https://news.ycombinator.com/item?id=20493585 https://news.ycombinator.com/item?id=20493585

• armitron 7y ago
  Key rotation can in many cases be ultra annoying and you dismiss PFS far too easily. After Snowden, we know for a fact nation states are conducting massive data capture operations. In some cases, visiting specific trigger sites is enough to tag you. PFS is very useful and there is nothing wrong with admitting that DSVPN can be unsuitable for more people than just axe murderers.