[Ach] OpenVPN and ACH

[Sebastian]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

For all who don't get notifications for the github repository:

An OpenVPN developer commented on the closed PR on OpenVPN:
https://github.com/BetterCrypto/Applied-Crypto-Hardening/pull/91#issuecomment-75365286

On 02/18/2015 07:48 PM, Aaron Zauner wrote:
> Hi,
>
> https://github.com/BetterCrypto/Applied-Crypto-Hardening/pull/91
>
> I've since removed (commented-out) the OpenVPN section in our document
> in commit 7b6fd17814acdbb2304ca3e84e99b02fe919abe6.
>
> If anybody is interested in maintaining and reviewing this, please speak
> up. To the best of my knowledge OpenVPN is not suitable for our document
> -- CBC-only support (not as a fallback) is a real threat to the
> transport security. Hence I would not recommend using it myself and have
> thus removed it from our document for the time being.
>
> Aaron
>
>
>
> _______________________________________________
> Ach mailing list
> Ach at lists.cert.at
> http://lists.cert.at/cgi-bin/mailman/listinfo/ach
>
> --
> python programming - mail server - photo - video - https://sebix.at
> To verify my cryptographic signature or send me encrypted mails, get my
> key at https://sebix.at/DC9B463B.asc or with gpg --keyserver
> keys.gnupg.net --recv-key DC9B463B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=uLEw
-----END PGP SIGNATURE-----