Live data from Hacker News

Free Open Source VPN – Curve25519,ChaCha20 – WireGuard and OpenVPN

openinternetaccess.com

11–17 of 17 posts

Re: Free Open Source VPN – Curve25519,ChaCha20 – WireGuard and OpenVPN

#12
post #10

People should be highly skeptical of "free" VPN and proxy services. They have the power to (easily) MITM you.

how so? they can track where i am connecting to, but that's about it.

That's also true, especially in the case of end-to-end asymmetrical encryption such as SSL.

Re: Free Open Source VPN – Curve25519,ChaCha20 – WireGuard and OpenVPN

#14

OpenVPN and WireGuard config pages download each other's configs. Also, keys are invalidated weekly and behind a CAPTCHA, so good luck automating the process of getting new keys weekly.

Could be automated by using a captcha service, I think just a few pennies per thousand of verifications.

Re: Free Open Source VPN – Curve25519,ChaCha20 – WireGuard and OpenVPN

#17
post #10

People should be highly skeptical of "free" VPN and proxy services. They have the power to (easily) MITM you.

how so? they can track where i am connecting to, but that's about it.

They can intercept DNS, they can snoop on cert names, they can monitor any unencrypted traffic (you'd be surprised how much there is even when you think you're hitting every site with HTTPS..)
Post reply on HN