So I signed up. But it looks to me like the certs & private key I downloaded for OpenVPN are the same for everybody. That being the case, anyone sniffing my network traffic could easily download everything they need to decrypt it from TorGuard's website, and it also enables MitM attacks. This is exactly the same problem public pre-shared keys have.
As far as I can tell, TorGuard is not offering any meaningful VPN encryption. At least not from anybody (ISP, hotspot operator, NSA, whoever) who bothers to record my session. I guess my IP is hidden from the non-VPN servers to which I connect, which is nice, but...this means (if I care about encryption at all) I need to do something like use Tor over the VPN, and if I'm doing that I can just use Tor by itself.
If I'm wrong or if there's some other factor in play, I'd love to hear about it. I want to like this service. I just don't get it right now--what's really being offered here?
Question
Guest
So I signed up. But it looks to me like the certs & private key I downloaded for OpenVPN are the same for everybody. That being the case, anyone sniffing my network traffic could easily download everything they need to decrypt it from TorGuard's website, and it also enables MitM attacks. This is exactly the same problem public pre-shared keys have.
As far as I can tell, TorGuard is not offering any meaningful VPN encryption. At least not from anybody (ISP, hotspot operator, NSA, whoever) who bothers to record my session. I guess my IP is hidden from the non-VPN servers to which I connect, which is nice, but...this means (if I care about encryption at all) I need to do something like use Tor over the VPN, and if I'm doing that I can just use Tor by itself.
If I'm wrong or if there's some other factor in play, I'd love to hear about it. I want to like this service. I just don't get it right now--what's really being offered here?
Thanks.
Link to post
Share on other sites
1 answer to this question
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.