Timeline for Should we discourage the use of PPTP
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 21, 2013 at 23:33 | comment | added | tylerl | @ChrisS The only remaining supported auth scheme for PPTP that can't be brute-forced in 20 minutes or less is the one that requires you to authenticate using x509 certificates. "Complex" is a matter of opinion, but for the average user it's pretty complex. | |
| Jan 21, 2013 at 22:03 | comment | added | Chris S Mod | @tylerl It doesn't have to be a complex authentication scheme, and most people should naturally think that v2 is somehow better than the original. I think most people, even here at SF, don't actually understand the security problems (or potential therefor) with PPTP. Also, configuring IPSec for no encryption and no authentication is easier than configuring encryption and authentication.... So your same argument works for the main alternative. | |
| Jan 21, 2013 at 5:13 | comment | added | tylerl | @ChrisS It's not that people do stupid things with it; it's that people don't know that they have to manually set up a complex authentication scheme to gain any modicum of security with it. That's not really a recipe for success. | |
| Jan 21, 2013 at 4:46 | comment | added | Mark Henderson Mod | @ChrisS - the NT one seemed poignant as I found out the other week that my major grocery chain still uses it on their brand new checkouts. | |
| Jan 21, 2013 at 4:11 | comment | added | Chris S Mod | +1 For "No", PPTP is just as secure as IPSec as any of the others. Just because people do stupid things with it doesn't mean it's inherently bad. Almost -1 for the NT bit; way out of support software shouldn't be used in a production environment unless you're asking how to upgrade off of it. You're analogy is about as good as most car analogies, just like an AMC Gremlin. | |
| Jan 21, 2013 at 4:10 | comment | added | Sven | That said, the issues around PPTP are somewhat special as many of the clueless won't understand the problem anyway and also it's debatable if it is an actual problem for the person who wants to establish it. If your goal is to get around YouTubes or Netflix' country ban, it's not going to be an isssue, but if you want to protect your trade secrets from someone, it really is. | |
| Jan 21, 2013 at 4:06 | comment | added | Sven | It's all fine if you know about the implications of doing something, be it to run an old NT4 box or setting up a PPTP VPN. Unfortunately, many people that come here don't and in these cases, adding some background is a good thing, IMHO. | |
| Jan 21, 2013 at 3:45 | history | answered | Mark HendersonMod | CC BY-SA 3.0 |