Re: Using copy protection dongles to distribute vpn encryption keys by mail?
Just a clarification, when you say "VPN encryption keys" do you mean the pre-shared secret keys, or do you mean the public key of the vpn device and the secret key of the user?
The reason I ask is the pre-shared keys can be written down, told over the phone, the closing price of gold every day until the max key length is reached, etc. Also you can disable IKE/IKEv2 certificate and key management thus reducing your attack surface.
Just a clarification, when you say "VPN encryption keys" do you mean the pre-shared secret keys, or do you mean the public key of the vpn device and the secret key of the user?
The reason I ask is the pre-shared keys can be written down, told over the phone, the closing price of gold every day until the max key length is reached, etc. Also you can disable IKE/IKEv2 certificate and key management thus reducing your attack surface.
Comment