[Ach] OpenVPN and ACH

Aaron Zauner azet at azet.org
Wed Feb 18 19:48:21 CET 2015


Hi,

https://github.com/BetterCrypto/Applied-Crypto-Hardening/pull/91

I've since removed (commented-out) the OpenVPN section in our document
in commit 7b6fd17814acdbb2304ca3e84e99b02fe919abe6.

If anybody is interested in maintaining and reviewing this, please speak
up. To the best of my knowledge OpenVPN is not suitable for our document
-- CBC-only support (not as a fallback) is a real threat to the
transport security. Hence I would not recommend using it myself and have
thus removed it from our document for the time being.

Aaron

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20150218/f811946c/attachment.sig>


More information about the Ach mailing list