4 ms·

You reminded me of "Allegations regarding OpenBSD IPSEC" [0] which, WRT the recent news of the NSA (attempting to) compromise encrypted VPNs, makes me wonder a

• Quequau 12y ago
  Yeah, I remember that controversy. As I recall those allegations prompted the OpenBSD to team do a full code audit of the IPSEC stack and, while they did find a few bugs, the conclusion was that there was no backdoor and that the bugs they found were not intentional. I think it's really hard to respond these sorts of allegations and I'm not sure we could honestly expect more than that. I'm really not trying to insinuate that OpenBSD is compromised or untrustworthy. I guess I'm just musing that, even though I've used OpenBSD for ages & ages and I do try to keep up with things in the OpenBSD world, I just don't grok the OpenBSD community... and that makes me feel uneasy sometimes.
  • jlgaddis 12y ago
    Yes, sorry, I wasn't intending to make any accusations or insinuations either. I've been following the Snowden/NSA stuff pretty closely, however, and even after reading the recent revelations WRT VPNs, I had forgotten about this OpenBSD IPSec controversy until you reminded me. (JFTR, I run OpenBSD in production, trust it greatly, and never believed the allegations of FBI/NSA/etc. "tampering".)