VPN Encryption

I've been a happy PIA subscriber since the Snowden controversy. However every time I see them becoming more popular (at least 4 of my friends have signed up with them in the past few weeks) and earnestly trying to make themselves more secure, I also realize that someone, somewhere within the NSA (and yes, other intelligence agencies around the world) is elevating them on a list of VPNs to break.

Re: VPN Encryption

#5

Post by xxdesmus » Mon, Sep 23, 2013, 3:22 PM UTC

awayand wrote: post #2

or, you could just use https://airvpn.org/

Yeah, that was helpful.

Re: VPN Encryption

#6

Post by canistr » Mon, Sep 23, 2013, 3:22 PM UTC

It should be noted that while they use curves generated by Certicom, Certicom is now a subsidiary of BlackBerry.

Re: VPN Encryption

#7

Post by drdaeman » Mon, Sep 23, 2013, 3:25 PM UTC

I was a bit surprised OpenVPN still doesn't support GCM mode.

Re: VPN Encryption

#8

Post by HPLovecraft » Mon, Sep 23, 2013, 3:28 PM UTC

a friend of a friend is a happy customer of PIA for over 9 months now. their customer service is actually really good.

Re: VPN Encryption

#9

Post by sixothree » Mon, Sep 23, 2013, 3:29 PM UTC

r0h1n wrote: post #4

I've been a happy PIA subscriber since the Snowden controversy. However every time I see them becoming more popular (at least 4 of my friends have signed up with them in the past few weeks) and earnestly trying to make themselves more secure, I also realize that someone, somewhere within the NSA (and yes, other intelligence agencies around the world) is elevating them on a list of VPNs to break.

Doesn't their business location in the US negate the need to be cracked?

Re: VPN Encryption

#10

Post by jevinskie » Mon, Sep 23, 2013, 3:34 PM UTC

coderrr wrote: post #3

FYI, this is the info page for our new (beta) OpenVPN based client which supports multiple encryption options: https://www.privateinternetaccess.com/forum/index.php?p=/dis...

I love PIA but I was too afraid to use it at Black Hat / DEFCON this year. If you use L2TP (required for iOS, handy for OS X because there is a native client) there is no certificate to prevent a MITM. Is there any way to address this? Can you use a certificate instead of a pre-shared key?