Re: PPTP (MPPE) security

From: Alvyn (anonymous_at_discussions.microsoft.com)
Date: 05/17/04 

Date: Sun, 16 May 2004 18:47:33 -0700

Hi Mr Steven Umbach

Thanks for the info.

Rgds
>-----Original Message-----
>Pptp uses a less secure encryption protocol than l2tp to
be sure but still
>considered secure enough for the vast majority of users.
Be sure to use a
>complex password for pptp as the password for initial
authentication is not
>protected by the vpn tunnel though if you are using
mschapv2 you should be fine.
>As far as 3DES and l2tp/ipsec, the keys used for
encryption are changed often
>enough that even if the session was cracked it would only
yield a small amount
>of data for a tremendous amount of effort that would
probably be old enough to
>be useless by then. I use pptp a lot and do not worry
about it. Those trying to
>crack vpn traffic would be going after high profile
targets, definitley not
>e. --- Steve
>
>
>"Alvyn" <anonymous@discussions.microsoft.com> wrote in
message
>news:d9e801c43b5a$208d40c0$a401280a@phx.gbl...
>> Hi,
>>
>> I came across a documentation stating that 3DES had been
>> hacked. But of course by thousands of PCs at one go.
>>
>> Anyone can advise me on this :
>>
>> 1. How about PPTP (MPPE) ? Can anyone with good hacking
>> knowledge but "limited resources", hacked this MPPE ?
>>
>> I ask this because I am using PPTP and is concern about
it.
>>
>> No offence to anyone :)
>>
>> thanks
>>
>
>
>.
>