I'm looking at a few VPN providers and many seem to offer L2TP VPN but they seem to share their shared secrets publicly on their website, for example :

Providing that anyone can read these shared secrets what prevents someone in a privileged network position (i.e. Government, ISP, etc) from setting up a rogue VPN server and impersonating the VPN provider, worse still there would be no way to know whether you connected to the real or rogue server - is this correct?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.