Would a solution that uses IKEv2.
Build your own private WireGuard VPN with PiVPN
231–235 of 235 posts
Re: Build your own private WireGuard VPN with PiVPN
#232Earlier quoted context omitted.
I'm sure there are still some people willing to report the websites to EU commission, it's a guaranteed fine (less so a paycheque, I have no clue if the company has to comply with paying it (unless later on they want to expand to the EU))
This is a fine that the EU can issue but why would the local business care? If I was issued a fine by the US, China, India or Japan it would directly go to the trashbin. It is their law, and their problem, not mine. Of course this means that I will not be able to do business there, if I travel I may be in trouble etc. But again - we are talking about small local newspapers (and similar businesses).
Yep, hence why I mentioned this would only be a problem if they ever want to do business with the EU
Re: Build your own private WireGuard VPN with PiVPN
#233Before going to a long 3 month trip to Asia last year, I installed WireGuard on my Raspberry Pi 1 (original model B from 2012) which was running at home in US. I found PiVPN to be the easiest way to install Wireguard. I didn't know if I even needed a VPN but I was glad, and I was able to use internet as if I were at home. It was weird, but a lot of sites are blocked oversea, even though it shouldn't. For example, I c…
> Apparently a lot of US business sites refuse to connect from oversea IP because (...) they just don't want to deal with it I am French. What I find fascinating is that there are local US newspapers (that server a tiny community) that went through the effort to do a geoblock from the EU and put a page along the lines "we cannot be compliant to Privacy laws in the EU so we must block you". Why do they care at all? Ho…
They care because no matter how small with travel and such these days there are potential risks if they're 'found' to be non-compliant. Simpler to say "no, we can't comply" than spend time/money/risk fighting about it later.
Not that I disagree with you on the 'it seems stupid' front. But that doesn't change the risk profile for the company.
Re: Build your own private WireGuard VPN with PiVPN
#234Earlier quoted context omitted.
I saw some references to post-quantum security, but I also saw references to something called "Post-Quantum Wireguard" so it seemed like that was handled by some other project, or at best some sub-component of Rosenpass.
Wireguard has a pre-shared key that can essentially get 'added to' the base key, making it more secure. Rosenpass effectively just makes these PSKs and trades them in a way that makes it quantum secure. Basically it should be a part of base wireguard, but for now it's a good addition.
Thanks, that's the clearest explanation I've seen.
Re: Build your own private WireGuard VPN with PiVPN
#235Earlier quoted context omitted.
A little trick for this is to listen on udp/53 which is almost always unblocked, even before captive portals
I once used port 53 for all my communications at a hotel that was charing metering bandwidth by the gb... it was a magical weekend of DNS passthrough with video calls, etc. 53 is my go to port when the network is wonky.
Could you elaborate on your setup? Do you have a proxy / VPN server running on port 53 somewhere?