Any One-Time password system.

Jon Spriggs jon at sprig.gs
Thu May 16 17:11:23 CEST 2013


PPTP is broken [1]. OpenVPN (for which there are clients for Android,
iPhone, MacOS, Linux, Windows) is not. OpenVPN will use TLS certificates as
well as other centrally managed authentication based systems (e.g. Radius,
MOTP, maybe Google Authenticator?) to authenticate and authorize. There are
lots and lots and lots of postings online discussing how to do these.

[1] https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/ also
http://www.h-online.com/security/features/A-death-blow-for-PPTP-1716768.htmland
many others.

--
Jon "The Nice Guy" Spriggs


On 16 May 2013 15:41, Sergii Bieliaievskyi <s.bieliaievskyi at sethq.com>wrote:

>
>
>
> 2013/5/16 Arran Cudbard-Bell <a.cudbardb at freeradius.org>
>
>> What are you actually trying to use this with?
>>
>> 802.1X/WPA2-Enterprise or for VPN authentication.
>>
>
> VPN authentication.
> And it should be multiplatform VPN. PPTP is supported by almost every
> vendors. I can establish PPTP connection from iPhone, Android,Linux,
> MacOS.... and so on That`s why PPTP is preferable.
>
>
> ------------------------------
> PRIVILEGED AND CONFIDENTIAL COMMUNICATION
> This e-mail transmission, and any documents, files or previous e-mail
> messages
> attached to it, may contain confidential information that is legally
> privileged.
>
> If you are not the intended recipient or a person responsible for
> delivering it
> to the intended recipient, you are hereby notified that any disclosure,
> copying,
> distribution or use of any of the information contained in or attached to
> this
> transmission is strictly prohibited.
>
> If you have received this transmission in error, please: (1) immediately
> notify
> me by reply e-mail, or by collect telephone call; and (2) destroy the
> original
> transmission and its attachments without reading or saving in any manner.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20130516/7a3fd01b/attachment.html>


More information about the Freeradius-Users mailing list