Serrip I am confused about SSL and TLS, if SSL can be compromised then why not build OpenVPN on top of TLS instead of SSL? With some VPN services they don't offer TLS with the users VPN connection, I am confused as to what this means - is it that OpenVPN cannot function with TLS, why would it not be offered when it's a superior security choice?
Traffic OpenVPN can use both SSL and TLS. SSL is enabled (and cannot be disabled) as OpenVPN uses OpenSSL throughout. To enable TLS See --tls-auth in The Manual v23x
Serrip So if a VPN provider does not offer a TLS encrypted data channel for the IP tunnel then I'm stuck with SSL. Even if I enable TLS on my client side, the handshake will be dictated server side, the two are pretty interchangeable I understand,m. But how will I know the handshake was performed through an SSL connection if I instigated it by TLS, or will it be obvious, will it just not let me? I've not done this before. Having read of venerabilities with SSL I would prefer the TLS route.
Traffic Serrip wroteSo if a VPN provider does not offer a TLSComplain to the Provider .. vote with your wallet and take your business elsewhere :mrgreen:
Serrip In essence that's exactly what it is, they don't provide it. How much less secure do you think I would be without TLS?
