Re: CRIME Microsoft's VPN Client

From: Jim Binkley (jrb@private)
Date: Mon Mar 31 2003 - 12:21:02 PST

  • Next message: Andrew Plato: "RE: CRIME Microsoft's VPN Client"

    PRO:
    
    It's not the other VPN technology that usoft makes ... i.e., PPTP
    
    E.g., see:
    http://www.counterpane.com/pptp.html
    http://www.counterpane.com/pptp-faq.html
    
    CON:
    
    No VPN is truly safe ... "less unsafe" than something?  
    
    Consider:
    
    your falacious model of the world:
    
    		VPN-using client
    		|
    		|  VPN
    		IDS/firewall that lets VPN thru
    		| encrypted packets 
    		inside ... including VPN server
     
    possible real model of the world:
    		VPN-using client <---- hacker 
    		|
    		|  VPN  (hacker gets free ride over firewall) 
    		IDS/firewall that lets VPN thru
    		| encrypted packets 
    		inside ... including VPN server
    
    					Jim Binkley
    					jrb@private
    
    		
    		
    
    					Jim Binkley
    					jrb@private
    Your message <3E889591.7000305@private>:
    >CON:  Made by Microsoft,  exploits waiting to be found.
    >CON:  MS Phone Home
    >CON:  NSA key
    >
    >Pro:  Free,  you get what you pay for with MS.
    >
    >Just Ranting
    >Shaun
    >
    >
    >Currie, Kevin wrote:
    >> Any comments pro or con on Microsoft's free Microsoft's L2TP/IPSec VPN
    >> Client?  
    >> 
    >> 
    >
    >
    >-- 
    >savages@private
    >GPG2003 = 68DB 57E8 702C 21D9 0AA5  2375 1EB1 6F82 858C 23AD
    >GPG2002 = B527 8F72 BAFA D490 6B30  6885 9FA2 34E8 EA73 F975
    >Public key at  http://www.savages.net/gpg/savages
    >
    



    This archive was generated by hypermail 2b30 : Mon Mar 31 2003 - 12:59:00 PST