|
![](/i/fill.gif) |
>> As does the fact that SSL and TLS both run over TCP, yet OpenVPN seems
>> to be using UPD. That looks like a big enough deviation from the
>> standard that I'm left wondering how many design decisions have been
>> made with potential security implications.
>
> Yes, exactly. That, and all the other things you might want to do (like
> be behind a NAT) that OpenVPN doesn't handle.
I thought I saw somewhere that OpenVPN *does* work with NAT, but IPSec
doesn't. (Because NAT involves packet modification, which IPSec is
obviously designed to prevent.)
--
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*
Post a reply to this message
|
![](/i/fill.gif) |