Staff 8641 Posted ... Hello! We're very glad to inform you that TLS 1.3 is now supported on all AirVPN web servers. Why TLS 1.3 is better than 1.2:https://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.3 TLS 1.0, 1.1 and 1.2 will still be available for backward compatibility. Kind regards and datalove AirVPN Staff 3 1 LuianaTok, puccettone, Air4141841 and 1 other reacted to this Quote Share this post Link to post
go558a83nk 290 Posted ... Any change to https://airvpn.org/specs/ with this new capability? LOL, I misread. Nevermind! 1 1 pekUpsecta2 and pekUpsecte0 reacted to this Quote Share this post Link to post
yoyall 1 Posted ... Great stuff! Just wondering whether Eddie can use TLS 1.3 now or will that come in a future release? 1 pekUpsectn5 reacted to this Quote Share this post Link to post
go558a83nk 290 Posted ... Looks like I'm not the only one to "misread". My friends, this applies to *web* servers. 1 1 LuianaTok and Limbo reacted to this Quote Share this post Link to post
zhang888 1059 Posted ... The OpenVPN connection has less benefits from TLS 1.3 unlike web. Most improvements are roundtrip and overhead related, so nothing OpenVPN can really benefit from, as well as downgrade attack extra prevention which are mitigated by both the client and the server. This would be supported eventually by all but not such important as web. Competitors should follow this as well better sooner than later 1 pekUpsecta2 reacted to this Quote Hide zhang888's signature Hide all signatures Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees. Share this post Link to post
morning.star 0 Posted ... On the config generator page, under Specs, I could only find tls-crypt, tls 1.2 How do I generate config files that support tls-crypt, tls 1.3? Quote Share this post Link to post
Staff 8641 Posted ... 4 hours ago, morning.star said: On the config generator page, under Specs, I could only find tls-crypt, tls 1.2 How do I generate config files that support tls-crypt, tls 1.3? Hello! You can't. TLS 1.3 will be supported starting from OpenVPN 2.4.7 in the near future. Quite irrelevant for OpenVPN currently, but stay tuned. TLS 1.3 is available on all of our web servers, where it is not irrelevant at all. Kind regards Quote Share this post Link to post
morning.star 0 Posted ... 8 hours ago, Staff said: You can't. TLS 1.3 will be supported starting from OpenVPN 2.4.7 in the near future I am using OpenVPN 2.4.7 and it supports TLS 1.3. When will I able to connect to your servers using TLS 1.3? 8 hours ago, Staff said: TLS 1.3 is available on all of our web servers, where it is not irrelevant at all. As mentioned, I am using OpenVPN 2.4.7. Please show me how to connect to your servers using TLS 1.3. Quote Share this post Link to post
go558a83nk 290 Posted ... 5 minutes ago, morning.star said: I am using OpenVPN 2.4.7 and it supports TLS 1.3. When will I able to connect to your servers using TLS 1.3? As mentioned, I am using OpenVPN 2.4.7. Please show me how to connect to your servers using TLS 1.3. *web* servers, not VPN servers. Quote Share this post Link to post
morning.star 0 Posted ... 6 hours ago, go558a83nk said: *web* servers, not VPN servers. When will AirVPN provide support of TLS 1.3 on its VPN servers? Quote Share this post Link to post
OpenSourcerer 939 Posted ... 4 hours ago, morning.star said: When will AirVPN provide support of TLS 1.3 on its VPN servers? Oh my god, patience! What the hell is wrong with some people nowadays? Everyone expects shit being done the moment they say they need it. Read Staff's post again... carefully. 1 LuianaTok reacted to this Quote Hide OpenSourcerer's signature Hide all signatures » I am not an AirVPN team member. All opinions are my own and are not to be considered official. Only the AirVPN Staff account should be viewed as such. » The forums is a place where you can ask questions to the community. You are not entitled to guaranteed answer times. Answer quality may vary, too. If you need professional support, please create tickets. » If you're new, take some time to read LZ1's New User Guide to AirVPN. On questions, use the search function first. On errors, search for the error message instead. » If you choose to create a new thread, keep in mind that we don't know your setup. Give info about it. Never forget the OpenVPN logs or, for Eddie, the support file (Logs > lifebelt icon). » The community kindly asks you to not set up Tor exit relays when connected to AirVPN. Their IP addresses are subject to restrictions and these are relayed to all users of the affected servers. » Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, chances are you will be unique amond the mass again. Share this post Link to post
go558a83nk 290 Posted ... Firefox is showing this web site as tls 1.2 now. Also, SSL Labs scan of airvpn.org shows tls 1.3 isn't supported.https://www.ssllabs.com/ssltest/analyze.html?d=airvpn.org&s=5.196.64.52 Edit: A couple hours later and it looks like you've got it fixed now. Thanks! Quote Share this post Link to post
Staff 8641 Posted ... @go558a83nk Hello! A momentary misconfiguration which has been fixed, thank you. Kind regards Quote Share this post Link to post