-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>Google organizes contest, see:
>>
>>http://code.google.com/summerofcode.html

> Hi,
> if I didn't have to write my thesis this summer, I'd love to participate.

Hi, I'm in the process of writing thesis too :)

> IMHO, TAP Support for Win95/98/Me isn't one of the features openvpn needs the 
> most. These OS aren't supported by MS any more. For me this means, that they 
> are insecure. And why should I permit insecure clients to connect a VPN?

You are right that unsuported means insecure, but it also means - no one
like to break those systems as well. There exists vulnerabilities, but
they are hidden and even if discovered by some masochist security guy,
almost no one will exploit them, because now everyone uses XP.
I don't want to say that security thru obscurity is good thing, but when
calculating risk you should take into account all aspects.
Incorrectly administrated XP can be more insecure than 98 with personal
firewall, antivirus and antispyware with current db (well IE and OE
should be also replaced).

> I think, a real tun driver for Windows is a killer feature. This would make 
> large heterogenous VPN setups much easier, because you could provide your 
> clients a layer-3 VPN without "losing" 2 addresses per client.

That would be good feature too. Regardless of our points of view on 98,
I think we agree that OpenVPN Solutions LLC participation in Summer of
Code as a mentor organization would be good thing :)

- --
Pawel Pokrywka
https://secure.cryptonix.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iQD1AwUBQqG/RAYJ6m8RUpKnAQIvbgb9EkkyBOnh6Cobprgz8eVxkf4E0KRcwMPr
tbef0UeJwKrlYOzhWqQHEhRbHixh99ODLewKpC+7T3ITXvPc3CW0wABk3j7nZV3z
RKg+yIuXYJbylJbbxIjg5ss4lFtyGF/1nr3Vs6ez+4mqeFgnZ9s8QZa1js/BDN58
mRu4eoG5Di+YuX/NDTVr685/bwdtfNOt9+YZhQmBFvHR4zNhO9Z62U1WKBFz0TLF
25yxVMUWasgcAmhVCbU1UuvNngTfJrCy/HG8vVWkt1Dya6ZQHWFJsmZ9iJnnRq8t
8VdBsmHDjoI=
=Nlmd
-----END PGP SIGNATURE-----

Reply via email to