>> As does the fact that SSL and TLS both run over TCP, yet OpenVPN seems 
>> to be using UPD. That looks like a big enough deviation from the 
>> standard that I'm left wondering how many design decisions have been 
>> made with potential security implications.
> 
> Yes, exactly. That, and all the other things you might want to do (like 
> be behind a NAT) that OpenVPN doesn't handle.

I thought I saw somewhere that OpenVPN *does* work with NAT, but IPSec 
doesn't. (Because NAT involves packet modification, which IPSec is 
obviously designed to prevent.)

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message