Subj : fsxNet Feedback (ZeroTier
To : Oli
From : N1uro
Date : Sun May 16 2021 09:04 pm
-=> Oli wrote to N1uro <=-
Ol> N1uro wrote (2021-05-14):
Ol> p2p connections work by default in ZeroTier. Does OpenVPN do any NAT
Ol> hole punching? A known and simpler alternative would be tinc. OpenVPN
Ol> has also become kind of old-tech. Is there anything wireguard wouldn't
Ol> do simpler and better (for our use case)?
If you're doing straight UNencrypted connections you don't need any VPN.
You could do it all with policy routing and a simple route table. It would
be 100% point to multipoint, no centralized hub required nor DNS in reality.
Just an IP address... which one already gets from their ISP.
Ol> Personally I'm not interested in a top-down approach with admin(s)
Ol> maintaining certs and granting and revoking access. I would call it
Ol> unnecessary centralization (bullshit power & small bus factor). FTN are
Ol> on the lower layer decentralized and designed as "cooperative anarchy".
I think the whole conversation steered away from the original claim which is
European Law requires a user's data be protected.
Ol> It's not that I don't appreciate your initiative to setup OpenVPN for
Ol> the network, I just doubt that standard VPNs are a good fit for FTN.
With the brain power on FTN nets, I'm sure we could develop our own solutions.
Ol> (not sure what the European hub and laws part is about)
See above. It was suggested that we needed to insure encryption in/out
of European nodes which require certs and such. Being in the west I don't
-need- to do such but it was also suggested that those going into european
points also must encrypt.
... G*t th*s* trib*les out*of m* ta*-lin* n*w!
--- MultiMail/Linux v0.52
* Origin: Carnage - risen from the dead now on SBBS (21:4/107)