3 ms·

Why is PPTP still used and promoted? http://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol#Security http://en.wikipedia.org/wiki/Point-to-Point_Tunnel

• smileplease 12y ago
  The AWS cloudformation template on the site supports both PPTP and L2TP IPSEC protocol. So use as you like based on your security needs / device compatibility.
• anfogoat 12y ago
  It's fast, easy to setup and has less overhead. It's perfectly fine when all you're looking for is a different geolocation quickly. But it shouldn't be promoted as secure.
• drzaiusapelord 12y ago
  Because IPSec is a dog in a million different ways (config, firewall, etc) and lots of shops moved to PPTP because it shipped on their Windows servers and is brain-dead simple to implement and use. It was "good enough." A lot of those issues linked are MS specific anyway, regarding MS-CHAP. You don't have to use MS-CHAP. PPTP has fallen out of fashion now, and I'm a little surprised to see it being promoted. Now we're all moving to IPSec running in L2TP which seems to be the best of both worlds. You lose the various firewall issues plain jane IPSec introduces and get IPSec level security. Of course you still have an IPSec config on your hands, but that's a one time pain. OSX, Windows, and Android support it natively which is a big plus as well. If you just want something quick and dirty, PPTP or OpenVPN SSL VPN are the obvious choices. Personally, I'd rather just do SOCKS or port forwarding with an ssh server somewhere than do lazy VPN. Its worth getting right.