RE: VPN Service

["David Gillett" <gillettdavid () fhda edu>]

   Traditionally, VPNs have been a service that corporate/institutional IT
departments have implemented to allow their users to access internal
resources remotely and securely.  This doesn't appear to be what you have in
mind.

  Only within the last 3-6 months, I've started getting spammed (NOT a
recommendation!) by mysterious third parties offering VPN services "to the
Internet", apparently as a way to secretly violate local Acceptable Use
policies.  It's true that if I use a protocol like POP3 or FTP (which don't
encrypt credentials), using a service like this should hide my credentials
from any local sniffers; on the flip side, it makes them visible to these
unknown third parties who are at least spammers and, for all I know, also
phishers.
  This is a rather strange definition of "security", abandoning any attempt
at Integrity or Availability and ensuring Confidentiality only with respect
to people you probably know and, if they prove untrustworthy, you might
actually have some recourse against.

  Privacy is only a subset of Confidentiality, which in turn is a subset of
Security.  Saying "security" when one really means "Privacy" is a common
error.  And trusting an unknown stranger of dubious scruples to shield you
from all other unscrupulous folks sounds like an invitation to be
exploited....

David Gillett, CCNP CISSP

-----Original Message-----
From: haZard0us [mailto:hazard0us.pt () gmail com]
Sent: Thursday, February 02, 2012 19:39
To: security-basics () securityfocus com
Subject: VPN Service

Hello all,

I'm looking for a VPN provider to encrypt my communications. My main
objective is to get secure communications while being able to search on the
web, read and create content and, most of all, can get my IM/IRC traffic
secure.

Any suggestions?

I've seen some providers - like HideMyAss, SwissVPN, etc - and i'm looking
for the best security with the lower price :)

Thanks in advance
-haZ

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we
examine the importance of Apache-SSL and who needs an SSL certificate.  We
look at how SSL works, how it benefits your company and how your customers
can tell if a site is secure. You will find out how to test, purchase,
install and use a thawte Digital Certificate on your Apache web server.
Throughout, best practices for set-up are highlighted to help you ensure
efficient ongoing management of your encryption keys and digital
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------