4 ms·
> According to the spokesperson, the expired private key could not have been used to decrypt the VPN traffic on any other server. It's simply not true. Their
by Snawoot 7y ago
> According to the spokesperson, the expired private key could not have been used to decrypt the VPN traffic on any other server.
It's simply not true.
Their CA private key which is used to issue certificates for ALL servers also leaked along with RADIUS key which is used to secure EAP session [1].
They DO hide facts.
[1] https://gist.githubusercontent.com/Snawoot/85f77356e229d77aa36f16059a629eea/raw/e4e4af26e4c411d32bbc6bd3ba26301c2ae074bd/nordvpn.txt https://gist.githubusercontent.com/Snawoot/85f77356e229d77aa...