Hacker News new | ask | show | jobs
by Hikikomori 2149 days ago
There's a lot you can do with vpn to make it more secure.

On our vpn we require a non-exportable certificate in the tpm chip, normal user credentials, then we have a captive portal that forwards to our SSO that requires a yubikey.

1 comments

Do you have a writeup describing your architecture in more detail?