Re: pptp security

I do not expect PPTP to succeed.

Yes, PPTP is no longer considered secure, but as you have pointed out
security is not the main issue; usability has taken precedence in the
market you operate in.

http://poptop.sourceforge.net/dox/protocol-security.phtml is our PPTP
project statement on the matter, dating back to 2005.

Since 2005 it has become even easier to attack the MSCHAP tokens, and
MPPE.  Easier because of CPU speed increases, distributed computing,
and the availability of complete hash dictionaries for rapid lookup.

It is not only the nature of authentication using password that
affects security, but also the ease with which the encryption that is
used can be broken into.

Windows computers do not use PPTP by default.  They must be configured
by the user before they use PPTP.  Thus the responsibility is on the
user.

There are OpenVPN packaged services that handle some of the
difficulties in installing.  I imagine that most installations of
OpenVPN are not done using the OpenVPN project instructions, but
rather using third-party installers.

-- 
James Cameron
http://quozl.linux.org.au/

------------------------------------------------------------------------------
Master SQL Server Development, Administration, T-SQL, SSAS, SSIS, SSRS
and more. Get SQL Server skills now (including 2012) with LearnDevNow -
200+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only - learn more at:
http://p.sf.net/sfu/learnmore_122512