3 ms·
Be careful with these guys. They instruct people to use weak crypto with their privacy service. https://www.privateinternetaccess.com/pages/client-support/#ub
by Estragon 12y ago
Be careful with these guys. They instruct people to use weak crypto with their privacy service.
https://www.privateinternetaccess.com/pages/client-support/#ubuntu_openvpn_installer https://www.privateinternetaccess.com/pages/client-support/#...
(RSA key for the certificate you end up installing is 1024 bits.)
- rasengan 12y agoThat's a false statement: https://www.privateinternetaccess.com/pages/vpn-encryption https://www.privateinternetaccess.com/pages/vpn-encryption
- Estragon 12y agoThe instructions in the link I gave very clearly result in a certificate using 1024-bit RSA. Anyone can download the installer or openvpn.zip from there and check for themselves. % wget https://www.privateinternetaccess.com/openvpn/openvpn.zip % unzip openvpn.zip % openssl x509 -in ca.crt -text -noout | grep Public.*Key Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (1024 bit) The vpn-encryption page you linked only compounds the problem, because it gives people a false impression that you actually are providing acceptably strong crypto.
- rasengan 12y agoYou're giving instructions from our 'alternate' installation method information. Thank you and have a great day.
- Estragon 12y agoThose are the only installation instructions for linux. Plus, it doesn't really matter that they're "alternate" if they're bad and PIA knows it (there have been multiple complaints about this on the PIA forum.)