There aren't many alternatives, but luckily it's possible to make two devices communicate without login using p2p instant messaging. It's the chicken-and-egg problem and this is where other solutions need an open Internet service and require a login from you. The problem with this protocol is that it relies on an already established connection between the two devices to exchange information on how to establish this new connection. It's possible to solve this problem using the ICE protocol that do a hole punching for NAT traversal, the same used for VoIP communications. Also, due Carrier-grade NAT is often used for mitigating IPv4 exhaustion, opening a port on a router no longer works for many providers. Although WireGuard is simple, fast and secure, having an open door to the public Internet will always be uncomfortable. This project was born from the impossibility of making a simple VPN connection between two devices in separate locations without depending on an external service or opening ports on a router. However, if your device has been compromised, chances are these private keys are the least of your problems. The biggest problem in using a software like that is the protection of your private keys, if one of the devices is compromised these keys can be used to establish a connection with the other pair. Before use, consider this information in your risk assessment. This project's code and some of the cryptographic libraries it uses have not been formally audited and therefore there is no way to guarantee that it's free of security bugs. Project status: proof-of-concept worked, now the focus is on making it generally usable. This project aims to establish peer-to-peer vpn connections between devices that are behind NAT in the simplest and secure way possible without the need to use a service from a company that requires a login or manage a public facing server yourself.
0 kommentar(er)
