<html>Just re: vpns, I'm personally interested in checking out <a href="https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/">algo</a> which generally looks rather promissing.<br /> <table><tbody><tr><th>Algo’s Features</th><th>Anti-features</th></tr><tr><td><ul><li>Supports only IKEv2</li><li>Supports only a single cipher suite w/ AES-GCM, SHA2 HMAC, and P-256 DH</li><li>Generates mobileconfig profiles to auto-configure Apple devices</li><li>Provides helper scripts to add and remove users</li><li>Blocks ads with a local DNS resolver and HTTP proxy</li><li>Based on current versions of Ubuntu and strongSwan</li><li>Installs to DigitalOcean, Amazon, Google, Azure or your own server</li></ul></td><td><ul><li>Does not support legacy cipher suites nor protocols like L2TP, IKEv1, or RSA</li><li>Does not install Tor, OpenVPN, or other risky servers</li><li>Does not depend on the security of TLS</li><li>Does not require client software on most platforms</li><li>Does not claim to provide anonymity or censorship avoidance</li><li>Does not claim to protect you from the FSB, MSS, DGSE, or FSM</li></ul></td></tr></tbody></table><br />On Tuesday, November 05, 2019 08:10 AWST, "Scott Young" <scott@sjy.id.au> wrote:<br /> <blockquote type="cite" cite="19ed2459-daa6-4efd-ad51-6981f1883519@www.fastmail.com">On Sat, 2 Nov 2019, at 6:04 PM, Callan Gray wrote:<br />> Will the club be open during exam period? It might also be helpful if someone<br />> could generate me a vpn key as described in https://wiki.ucc.asn.au/VPN<br /><br />I'm afraid this will be unhelpful to Callan as I'm no longer a current student<br />or located in Western Australia, but it reminds me that it would be cool if UCC<br />made WireGuard available as an alternative to the older VPN software documented<br />on the wiki, which I found to be painful to configure when I tried at various<br />times between 2007 and 2013.<br /><br />I've recently set up a few small scale VPNs using WireGuard and it's been very<br />educational for me. Creating a script that allows users to add new WireGuard<br />interfaces or peers without needing root access seems like a good UCC project<br />and service, but since I lost root access in the recent wheel purge, I've been<br />experimenting on my own hardware instead.<br /><br />Kind regards,<br /><br />Scott Young [SJY]<br />_______________________________________________<br />List Archives: http://lists.ucc.asn.au/pipermail/tech<br /><br />Unsubscribe here: https://lists.ucc.gu.uwa.edu.au/mailman/options/tech/tec%40ucc.gu.uwa.edu.au</blockquote><br /><br /><br /> </html>