NSA stealing keys - is this a risk.

[PrecisionLotus 0]

When generating login certs and keys it arrives over the clear net in the form of a download package, while the keyfile says "keep this key private", but by the very act of downloading wasn't it just potentially compromised to an NSA datacenter? Downloading via TOR hardly helps either, without encryption it can be intercepted not only by Government but hackers sniffing the exit nodes.

[Staff 9972]

When generating login certs and keys it arrives over the clear net in the form of a download package, while the keyfile says "keep this key private", but by the very act of downloading wasn't it just potentially compromised to an NSA datacenter? Downloading via TOR hardly helps either, without encryption it can be intercepted not only by Government but hackers sniffing the exit nodes.

 

Hello!

 

No, you're wrong, they are NOT transmitted unencrypted.

 

Anyway your user.key is useless to decrypt your OpenVPN communications. It can be used to connect to a VPN server of ours.

 

Kind regards