Jump to content
Not connected, Your IP: 3.137.176.213

Leaderboard


Popular Content

Showing content with the highest reputation on 01/07/21 in Posts

  1. 1 point
    As far as I see it, it's armv7l, so it can be used on all processors with this architecture, regardless of OS. I think it would even work on Wine for Android.
  2. 1 point
    OpenSourcerer

    Safety of .ovpn file

    The private key is part of the encryption method RSA, so yes. In this case, the profile contains the RSA key encrypted with your password. It's a safer way of storing the key if you don't fully trust the storage location, e.g. a SMB share or NFS export used by others. People can download the profile and try to use it with OpenVPN but will find that the password is needed to decrypt it in the first place. Yes, the key will be fundamentally different. Every account can have five concurrent connections to AirVPN. In theory, you can connect with the same key multiple times but you can't do that to the same OpenVPN daemon (as in, connect to the same server with the same connection settings). If you use different keys, you make your life easier: The aforementioned restrictions don't apply, connect up to five times to the same server using UDP/443 for example without issue. You can name the keys, for example "my PC", "Android" or "Mom". If you see an active session in your client area, you will know which device is using it – or who, naming those keys is at your discretion and is only shown in the client area. A triviality: If someone manages to get hold of your key and you used that key on all your devices, and you now must go and renew the key, you need to reimport the new key everywhere. If you had five different keys for all the devices, you only would have needed to reimport the one compromised key on one device. More specifically, the difference between tls-auth and tls-crypt. The nameless option is tls-auth. tls-crypt is more secure because it prevents a few attack vectors against the whole process of creating a TLS session between two communication parties (like an OpenVPN server and client). If you're not using a very old OpenVPN version (pre-2.4), always use tls-crypt.
  3. 1 point
    Staff

    Apple Silicon version?

    Hello! Sure, porting our software to ARM based Mac machines is an option we are seriously considering because during 2021 (and maybe 2022) Mac Apple will abandon development of x86-64 based computers completely. Stay tuned. Kind regards
×
×
  • Create New...