Hacker News new | ask | show | jobs
by sargun 2897 days ago
Does anyone know if there are any plans to standardize (d)TLS VPNs?
1 comments

I highly doubt it. Most vendors try to sell it as an USP and as an "it is easy because it is TLS and runs over 443 so inflexible environments will allow you to work"-type of solution which is trying to fix symptoms instead of causes.

For anyone who is reasonable at *nix configuration, setting up OpenVPN, IKEv2 or classic IPSec tunnels is not 'easier' than any SSL/TLS VPN, which makes it lose a lot of it's value vs. other VPN options.

IPSec provides unique problems when it comes to NAT traversal - something that is extremely common.
Not so sure. All current implementations have Nat-T on as default. Could you give an example, please? IKEv2 preferred.