On Encryption

Post by [deleted] » Mon, Sep 09, 2013, 10:20 PM UTC

stock_toaster wrote: post #10

> We will also be adding support for something no other provider is currently offering called Elliptic Curve Cryptographic security, with both 256bit and 521bit curves. Any particular reason to not offer 384bit as well? ps. likely a typo: 521 should be 512? edit: Nope. 521 is correct[1]. thanks @mtoledo [1]: https://en.wikipedia.org/wiki/Elliptic_curve_cryptography#ci...

Post by stock_toaster » Mon, Sep 09, 2013, 10:23 PM UTC

mtoledo wrote: post #11

stock_toaster wrote: post #10

> We will also be adding support for something no other provider is currently offering called Elliptic Curve Cryptographic security, with both 256bit and 521bit curves. Any particular reason to not offer 384bit as well? ps. likely a typo: 521 should be 512? edit: Nope. 521 is correct[1]. thanks @mtoledo [1]: https://en.wikipedia.org/wiki/Elliptic_curve_cryptography#ci...

"The sequence may seem suggestive of a typographic error. Nevertheless, the last value is 521 and not 512 bits." https://en.wikipedia.org/wiki/Elliptic_curve_cryptography#ci...

Post by newman314 » Mon, Sep 09, 2013, 11:15 PM UTC

coderrr wrote: post #3

[deleted] wrote: post #2

[deleted]

For OpenVPN - which is the only protocol we advise for real security (PPTP and IPSec/L2TP are fine for just hiding your IP) - we don't use pre-shared keys. OpenVPN uses TLS for exchanging strong symmetric keys. Your password is only used for authentication and its entropy isn't related to your session's security.

Post by SilliMon » Mon, Sep 09, 2013, 11:49 PM UTC

Post by contingencies » Tue, Sep 10, 2013, 6:24 AM UTC

SilliMon wrote: post #18

If I were the NSA, I would run these VPN services. They provide a perfect honeypot to gather the "illegal" web users or those with something to hide, in one place.