Does OpenVPN Provide Perfect Forward Secrecy?

[DasFox]

I was checking out a VPN provider online and asking them some questions and it's my understanding that OpenVPN has perfect forward secrecy, but this was their reply; 'If you are referring to Vpn, there is not PFS in openvpn'.

I guess so?

http://openvpn.net/index.php/open-sourc ... envpn.html

Thanks...

[Mimiko]

"perfect forward secrecy" is reffered to SSL not the OpenVPN itself, that uses SSL.

[DasFox]

"perfect forward secrecy" is reffered to SSL not the OpenVPN itself, that uses SSL.

So Perfect Forward Secrecy is just SSL?

What does this mean then?

If you use SSL/TLS authentication, you have the benefit of "perfect forward secrecy".


THANKS

[krzee]

openvpn provides forward security when you use certificates (client/server).
when you use shared key (ptp) it does not.
forward security refers to the fact that the effective encryption keys are changed every hour, so if someone somehow figured out the encryption key being used to encrypt the traffic, they would only be able to decrypt the traffic from that hour