|
![](/i/fill.gif) |
>> True. But given that it seems to be a one man project...
>
> I see. I hadn't followed it up. No, if the author of the code is the
> author of the paper, I'd definitely go with IPSEC. :-)
It appears the report was written by somebody other than the author. But
then, comments like "OpenVPN seems to be using SSL" make me suspicious.
As does the fact that SSL and TLS both run over TCP, yet OpenVPN seems
to be using UPD. That looks like a big enough deviation from the
standard that I'm left wondering how many design decisions have been
made with potential security implications.
It's not like OpenVPN just calls the OpenSSH crypto library to do its
bidding; it looks like a complete new implementation.
--
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*
Post a reply to this message
|
![](/i/fill.gif) |