Mailing the story:

How To Secure An SSL VPN With One-Time Passcodes And Mutual Authentication

  • HowtoForge; By Nick Owen (Posted by on CST)
  • Story Type: Tutorial; Groups: Linux
SSL-based VPNs were designed to eliminate the need for complex configurations on the user's PC. Unfortunately, that was before the dangers of public WiFi networks and tougher regulatory requirements came into being. Thanks to WiFi, many attacks that were difficult are now quite simple. In particular, a man-in-the-middle attack can intercept SSL-encrypted traffic, rendering SSL-based VPNs useless - even if it is protected by a typical one-time password system. The man-in-the-middle can easily feed the one-time password into the SSL-based VPN within the alloted time.
What is your name?

What is your E-Mail address?

What is the email address of the recipient?

Add a special note from yourself?