RE: Home VPN - Hamachi

["UKHA" <ukha@xxxxxxxxxxxxxxxxxxxxxxx>]

On 17/12/2005 at 12:22 Mark McCall wrote:

>> Except you need to go via their server to connect.. there
>> appears to be no direct connection option - ie ip <-> ip -
>> why would I want to have a 3rd party involved in any way in my
vpn?
>
>"Hamachi is secure. All Hamachi communications are encrypted and
>authenticated with industry-standard algorithms and protocols. Nobody
will
>be able to see what two Hamachi peers are talking about. Not even
us."
>
>If it gets the thumbs up from Steve "Mr Security" Gibson, I
imagine it's
>secure..
>
>As for the reason - the advantage of this is supposed to be that it's
>"Zero-configuration VPN".  What that means in practise I have
no idea.
>
>M.

I'm not saying that the communications isn't encrypted, I'm saying that
you're trusting a 3rd party
not to listen in etc. Since there's no mechanism for you to test that your
data isn't being sent to
their servers - you only have their word... an AFaIK they have no track
record to base any decisions
on. Of course since they are encrypting data to their servers you have no
way to know what data they
are actually sending. Sure they have had Steve Gibson look at it - Is he
going to validate every version?
Is he just validating the encryption etc?

Most (guess) people on the list are probably using IPcop/smoothwall etc,
Personally If I were doing that I'd go the extra
step and install openvpn on that and use the linux/windows clients to
connect. Ok, so it's not zero configuration
but it's a lot more secure that trusting someone you don't know...


Andy




--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.1/206 - Release Date: 16/12/2005





--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.1/206 - Release Date: 16/12/2005