Re: PGPNet Upgrade path ?

[Martijn Lievaart <m () rtij nl>]

Aditya Deshmukh wrote:

> > > What alternatives are there to pgpnet ?
> > >      
> > Have a look at OpenVPN.
> >    
>
> Thanks Martijn, but isn`t that a SSL vpn ? And from what I 
> have read about PGPnet I need a IPSEC VPN that uses 
> PGP keys to do the auth.
>  

It's real VPN based on SSL technoligy, but not a WebSSL VPN. It's more 
like IpSec than like a WebVPN in that it creates true network paths, not 
virtual ones in a browser.

> I know for ipsec VPNs I could use the winxp's builtin 
> But that would require moving all the PGP keys to 
> X.509 certs.
>
>  

Yes, absolutely. For OpenVPN you need to use X509 certs, you will have 
to rework your whole PKI. However:
* It's is free
* It's is safe (an audit of most opensource vpn solutions clearly showed 
OpenVPN to be both well designed as well as well implemented)
* It's a snap to set up, contrary to IpSec (provided you have openssl 
somewhere to generate the needed PKI)
* It can be used as a service or a user program on Windows.

So if you consider dropping PGP all together, have a look at OpenVPN.

M4

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/