Questions tagged [pptp]
The Point-to-Point Tunneling Protocol is a method used to implement virtual private networks. The RFC can be found here: http://tools.ietf.org/html/rfc2637. PPTP is (as of Oct 2012) considered cryptographically broken and its use is no longer recommended by Microsoft.
15 questions
1
vote
1
answer
159
views
What are the risks with PPTP (MS-CHAPV1/V2)?
What are the risks with PPTP (MS-CHAPV1/V2)? Are the only ways that it can be exploited are if someone already has access to the network and can ARP poison etc or capture packets some way? Or can it ...
- 11
0
votes
0
answers
298
views
Is it safe to use HTTPS websites over an unknown PPTP VPN? [duplicate]
I want to create e.g a Gmail account while connected to an unknown PPTP VPN. Is it safe, or can the owner of the PPTP VPN see my Gmail web page information, such as username or password, at all? Can ...
- 1
1
vote
1
answer
861
views
Could PPTP be considered a secure VPN type with idle timeout 0?
Ive got a Draytek router which im trying to setup as a VPN host.
The options i have are :
PPTP
IPSEC
LT2P with IPSEC policy
SSL
My VPN client only seems to supported PPTP and LT2P with IPSEC ...
- 576
5
votes
2
answers
1k
views
Should I tell my boss the company's VPN is not secure?
I work in a small company and we have recently invested in a new server that provides VPN services.
I contacted the IT company in charge today in order to connect my laptop so I can work from home.
I ...
- 153
4
votes
0
answers
353
views
Is it possible to implement a downgrade attack on a PPTP VPN?
There are many materials about the Dictionary attack or bit-flipping attack to PPTP VPN. But is it possible to implement a downgrade attack to PPTP.
This is a picture showing how to implement a ...
- 41
1
vote
3
answers
968
views
How to secure clear text data that is transmitted through LAN / Wireless LAN connection and PPTP VPN without a domain name (IP address only)
We use Odoo ERP in our office and there is a statement in the documentation which says:
Whether it's accessed via website/web client or the webservice, Odoo
transmits authentication information ...
- 111
1
vote
1
answer
353
views
Does any VPN protocol authenticate the server?
When you connect to a server using SSL/TLS the client authenticates the server using the certificate that the server provides. If certificates mismatch an error page is shown instead. So you know you ...
- 691
1
vote
1
answer
1k
views
Can I use a VPN to disguise internet traffic at work? [closed]
I have seen this question asked before; I want to know if I can use a VPN to disguise my internet traffic so my employer can't see what websites I'm visiting while at work. However, unlike most people,...
user76876
2
votes
2
answers
185
views
Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)
When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection.
...
- 23
7
votes
1
answer
2k
views
Does using NAT-T for L2TP / IPsec VPN pose a realistic security risk?
I'm working on upgrading an old Windows RAS server that hosts PPTP VPN. I want to move to a L2TP/IPsec VPN.
Due to the firewall appliance we use, the VPN server has to be behind a NAT. This means ...
- 193
3
votes
2
answers
2k
views
Skype Audio / Video Session over VPN?
Basically I'm wondering if a Skype video session along with audio could be logged (or recorded) over a virtual private network? I know whoever hosts the VPN server can log which websites you visit (or ...
- 131
9
votes
1
answer
28k
views
Is PPTP VPN ever secure? Under DD-WRT? [duplicate]
PPTP is not an open, ratified standard the way that, for example, SSL/TLS is. (see: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.2 and http://datatracker.ietf.org/doc/rfc5246/ )
The ...
- 91
2
votes
1
answer
142
views
PPTP and Split Routing
If I uncheck the "use default gateway on remote network" to be able to browse local shares and the internet at the same time, does that void encryption?
- 23
30
votes
3
answers
42k
views
Are there any known vulnerabilities in PPTP VPNs when configured properly?
PPTP is the only VPN protocol supported by some devices (for example, the Asus RT-AC66U WiFi router). If PPTP is configured to only use the most secure options, does its use present any security ...
- 303
8
votes
1
answer
25k
views
How can I tell if a PPTP tunnel is secure?
PPTP has been demonstrated to be broken in many ways, and most installations are insecure. But it is also theoretically not broken if configured correctly.
As an end-user, is there a simple way for ...
- 83.8k