Long Haul Flight - WiFi & VPN

onomatopoeia99

Deleted_User said:

Even better it allows the Wireguard protocol which is more secure than OpenVPN, lower processor overhead to save battery on portable devices.

More secure?  I know wireguard is lower overhead, but more secure is not something I've heard.

Not that I use VPN services where I don't control the endpoint.

edit - even Proton VPN which uses Wireguard acknowledges the security of openVPN https://protonvpn.com/blog/openvpn-vs-wireguard/

[Deleted User]

onomatopoeia99 said:

Deleted_User said:

Even better it allows the Wireguard protocol which is more secure than OpenVPN, lower processor overhead to save battery on portable devices.

More secure?  I know wireguard is lower overhead, but more secure is not something I've heard.

Not that I use VPN services where I don't control the endpoint.

edit - even Proton VPN which uses Wireguard acknowledges the security of openVPN https://protonvpn.com/blog/openvpn-vs-wireguard/

So both are very secure and there isn't any historic vulnerabilities in either protocol that are concerning but:

1. Auditability - Wireguard consist of just 4,000 lines of code vs 70,000 for OpenVPN. When it comes to auditing the code, Wireguard is much easier, one person could practically do that in a reasonable time period.
   
   
2. Attack surface - as above, 70,000 lines of code are statistically more likely to contain a bug or vulnerability than 4,000 lines of code.
   
   
3. Protocols - OpenVPN tries to be everything to everyone and is very compatible but allows downgrades to older and less secure protocols. Wireguard is more selective and uses a small subset of higher security protocols.
   
   
4. Related to the above, Wireguard intentionally lacks protocol agility, if vulnerabilities are found, all endpoints are required to upgrade to the latest version and will reject any attempt to connect with vulnerable code.

The security differences are subtle and probably of no relevance to most users, but the faster lower overhead code base is hard to ignore on portable devices.

getmore4less

The less is more conundrum

Well crafted code can be concise but not everyone is good at it

Too many bug fixes on software add code rather's than fixing the code that was designed wrong in the first place.

tafelmoneysaver

Back to the thread, wouldn't it be likely that some or all access via VPN be blocked on the plane in an effort to preserve the connection bandwidth for others?

If too many passengers started streaming some HD movies the service could grind to a halt.