Changes between Version 5 and Version 6 of Compression


Ignore:
Timestamp:
11/25/21 23:31:12 (2 years ago)
Author:
tct
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Compression

    v5 v6  
    2121`TL;DR` OpenVPN are not removing compression but it must be made secure. You do not need it.
    2222
    23 = Make Compression Secure
     23== Make Compression Secure
    2424
    2525Because only upstream packets are vulnerable to the VORACLE Attack, OpenVPN has implemented **Asynchronous Compression**. This means that only the Server sends compressed data to the Client.  When the Client sends data to the Server, that data is not compressed and **not susceptible to VORACLE**.
     
    3434- `yes` - Use this if you really do need compression AND you understand the risk you are taking.
    3535
    36 `TL;DR` - **Update to OpenVPN 2.5** and remove `comp-lzo` and `compress` from all your configs.
     36== Bottom line
     37
     38`TL;DR`
     39  **Update to OpenVPN 2.5** and remove `comp-lzo` and `compress` from all your configs.[[br]]OpenVPN will do the rest for you, securely.