Hello

> Sent: Friday, December 16, 2016 at 6:14 AM
> From: "Steffan Karger" <stef...@karger.me>
> To: "Dreetjeh D" <dreet...@hotmail.com>
> Cc: "openvpn-users@lists.sourceforge.net" 
> <openvpn-users@lists.sourceforge.net>
> Subject: Re: [Openvpn-users] Fwd: Re: Experts' opinions needed: Is my VPN 
> provider using weak or strong encryption algorithms?
>
> 
> The reason why you won't see much VPN providers use the tls-auth key
> is that it doesn't work that well with their model: they can't really
> trust their clients, but have to give all clients the same tls-auth
> key.  This model works much better for company or private VPNs, where
> the clients can be trusted to some extend.

Can I take your above statement into consideration when I shop for a commercial 
VPN provider? For example, before I buy a subscription plan, I will ask if they 
use tls-auth ta.key. If they do, it means they trust their customers, yes?

> (I'm working on adding
> support for client-specific tls-auth/tls-crypt keys to fix this, you
> can expect a proposal on the openvpn-devel list early next year.)

That's good news, Steffan. I wonder why your proposed feature was not included 
in earlier versions of OpenVPN? Was it because of time constraints? complexity 
in coding?

Regards.

Sebastian


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to