5 ms·
Interesting :) Follow up, trying to cement my understanding here. If two devices may talk to each other (as defined in the ACL), only then they get to know each
by forgot_old_user 7y ago
Interesting :) Follow up, trying to cement my understanding here.
If two devices may talk to each other (as defined in the ACL), only then they get to know each other's public keys, right?
If so, how would this ACL be negated later- do the devices forget eachother after this disallow?
- crawshaw 7y agoYes, you only get the public keys of machines you can talk to. Later the server asks the client to forget the key if they can no longer talk. Additionally, we rotate keys. For security sensitive users we can rotate these keys daily.
- forgot_old_user 7y agoThank you! Fascinating work. Easily readable, yet highly informative article. Hope you are the ones that kill off VPNs!