>> True. But given that it seems to be a one man project... 
> 
> I see. I hadn't followed it up.  No, if the author of the code is the 
> author of the paper, I'd definitely go with IPSEC. :-)

It appears the report was written by somebody other than the author. But 
then, comments like "OpenVPN seems to be using SSL" make me suspicious. 
As does the fact that SSL and TLS both run over TCP, yet OpenVPN seems 
to be using UPD. That looks like a big enough deviation from the 
standard that I'm left wondering how many design decisions have been 
made with potential security implications.

It's not like OpenVPN just calls the OpenSSH crypto library to do its 
bidding; it looks like a complete new implementation.

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message