4 ms·

I wish Apple would just integrate Wireguard into macOS itself. macOS has a built-in option for VPNs in the network preferences but it's shit like L2TP over IPSe

by Hamuko 6y ago

I wish Apple would just integrate Wireguard into macOS itself. macOS has a built-in option for VPNs in the network preferences but it's shit like L2TP over IPSec.

sneak 6y ago
I don't think Apple cares very much about personal VPNs, only corporate ones. The number of people who gate a mac purchase on the capability to speak WireGuard is tiny. I now only connect my macs and ios devices to the internet via external VPN router/firewalls on which I have root; I can no longer invest the time to hack macOS sufficiently to permit me to ensure that no unauthorized traffic is leaving it. This means none of my iPads or iPhones have SIMs in them any longer, as I take this approach even when mobile (gl.inet makes a travel VPN router with an LTE interface that runs OpenWRT).
- Hamuko 6y ago
  I would imagine Wireguard usage in corporate networks to increase in the future, so if Apple only cares about corporate VPNs, surely there'd be reason to implement that as well. My guess would rather be that Apple at some point cared about corporate VPNs but no longer do, and that option is mainly just legacy.
  - weitzj 6y ago
    If Wireguard would be certified and you can have a contract with a company to carry the risk of this VPN solution then it will gain traction. I know that technically it is probably superior and safer, but for regulatory things people might still chose Ipsec
- pietrovismara 6y ago
  > I can no longer invest the time to hack macOS sufficiently to permit me to ensure that no unauthorized traffic is leaving it. > This means none of my iPads or iPhones have SIMs in them any longer If you use Apple products for personal use: you sound like a masochist. If you are forced to use them professionally: I'm sorry for you.
  - sneak 6y ago
    Neither is true. Android in the stock configuration is much the same, and the hardware is worse.
    - pietrovismara 6y ago
      To the point you feel forced to use your Android phone without SIM? I bought my android phone for less than 150€ and it does what I need (phone calls, navigation). For everything else I use a debian based distro on my laptop (in some rare case, I dual boot windows). I really have no issues and I spent way way less than any Apple fan ever will to do basically the same thing. Let's be honest, most people are willing to pay hefty prices for Apple's products just because of the social status they provide.
    - vinay427 6y ago
      The displays on iOS devices already ruin the experience for me nowadays. The perceivable smoothness from a 90-120Hz display still surprises me but now I can't really go back to an older display for daily use. Flagship Android devices also have far more hardware features in general (faster charging, more interfacing options, more cutting-edge "gimmicks," etc.). To be honest, I don't mind iOS, but I'm not really sure what iPhone hardware you think is better or even on par at a comparable price point.
tfvlrue 6y ago
I'm curious what's wrong with L2TP over IPSec. I use it primarily for remote management of networks and haven't had any problems with it. It's simple to set up, and pretty much every device has a client for it already built-in (Windows, Mac, iOS, Android). Is there a use case it's particularly poorly suited for?

by Hamuko 6y ago

I wish Apple would just integrate Wireguard into macOS itself. macOS has a built-in option for VPNs in the network preferences but it's shit like L2TP over IPSec.

sneak 6y ago

I don't think Apple cares very much about personal VPNs, only corporate ones. The number of people who gate a mac purchase on the capability to speak WireGuard is tiny. I now only connect my macs and ios devices to the internet via external VPN router/firewalls on which I have root; I can no longer invest the time to hack macOS sufficiently to permit me to ensure that no unauthorized traffic is leaving it. This means none of my iPads or iPhones have SIMs in them any longer, as I take this approach even when mobile (gl.inet makes a travel VPN router with an LTE interface that runs OpenWRT).

Hamuko 6y ago
I would imagine Wireguard usage in corporate networks to increase in the future, so if Apple only cares about corporate VPNs, surely there'd be reason to implement that as well. My guess would rather be that Apple at some point cared about corporate VPNs but no longer do, and that option is mainly just legacy.
- weitzj 6y ago
  If Wireguard would be certified and you can have a contract with a company to carry the risk of this VPN solution then it will gain traction. I know that technically it is probably superior and safer, but for regulatory things people might still chose Ipsec
pietrovismara 6y ago
> I can no longer invest the time to hack macOS sufficiently to permit me to ensure that no unauthorized traffic is leaving it. > This means none of my iPads or iPhones have SIMs in them any longer If you use Apple products for personal use: you sound like a masochist. If you are forced to use them professionally: I'm sorry for you.
- sneak 6y ago
  Neither is true. Android in the stock configuration is much the same, and the hardware is worse.
  - pietrovismara 6y ago
    To the point you feel forced to use your Android phone without SIM? I bought my android phone for less than 150€ and it does what I need (phone calls, navigation). For everything else I use a debian based distro on my laptop (in some rare case, I dual boot windows). I really have no issues and I spent way way less than any Apple fan ever will to do basically the same thing. Let's be honest, most people are willing to pay hefty prices for Apple's products just because of the social status they provide.
  - vinay427 6y ago
    The displays on iOS devices already ruin the experience for me nowadays. The perceivable smoothness from a 90-120Hz display still surprises me but now I can't really go back to an older display for daily use. Flagship Android devices also have far more hardware features in general (faster charging, more interfacing options, more cutting-edge "gimmicks," etc.). To be honest, I don't mind iOS, but I'm not really sure what iPhone hardware you think is better or even on par at a comparable price point.

tfvlrue 6y ago

I'm curious what's wrong with L2TP over IPSec. I use it primarily for remote management of networks and haven't had any problems with it. It's simple to set up, and pretty much every device has a client for it already built-in (Windows, Mac, iOS, Android). Is there a use case it's particularly poorly suited for?