To combine stunnel and tls-crypt - or not?

[JSD 6]

Hello,

 

my understanding of stunnel and tls-crypt is very basic. However, if I get it right, stunnel is supposed to make traffic look like normal SSL traffic, while tls-crypt shall hide some special characteristics of OpenVPN (and other proocols?).

 

Could this mean that by combiningn stunnel and tls-crypt you will strip the SSL pattern produecd by stunnel of some typical markers that are typical for SSL? Would it therefore be wiser NOT to combine these two forms of obfuscation together? Or am I misguided here?

[tehhellhound 8]

Stunnel is mainly to obfuscate the handshake during the connection so it can't be targeted for throttling or blocking. Otherwise all it can do is slow you down if you're not on a hostile network. tls-crypt is what is used for the actual key exchange. Stunnel hides the handshake and makes it look like a regular SSL connection but as I said I would only use stunnel if you have issues without it. Sure it adds another weaker layer of encryption, but the encryption already present would take years to crack as it is.

[JSD 6]

Thank you for your reply.