3 ms·
> VPNs add a layer of security at the network level Which you get from TLS. Strong authentication and authorization per-web-application using short-lived token
by 0xbadcafebee 4y ago
> VPNs add a layer of security at the network level
Which you get from TLS. Strong authentication and authorization per-web-application using short-lived tokens through OAuth/OIDC is about a billion times more robust than any VPN network security.
90% of what VPNs are useful for is connecting you to a non-routable network.
- exabrial 4y agoThis is also very very incorrect! Think about it, how come people in Iran/China use VPNs to access the outside work? If TLS were sufficient for privacy, your claim would be correct, but this is very far from reality. TLS is another _layer_ of security, but it still reveals who you are talking to via SNI and DNS queries, and worse: how often you are talking to them.
- kelnos 4y agoThat's kinda a different thing, though. People using VPNs to circumvent national internet restrictions is one thing. Securing a corporate network is another.
- deleted 4y ago[deleted]
- 0xbadcafebee 4y agoYou can use TLS to secure a VPN connection from state actors. You can also use TLS 1.3 to avoid SNI, and DNS over HTTPS (or just use DNS over a tunneled connection). But I'm talking about how you don't need a VPN for a business purpose.