Parcourir la source

Mention TLS wrapper

Bob Mottram il y a 7 ans
Parent
révision
0359de62c1
2 fichiers modifiés avec 21 ajouts et 15 suppressions
  1. 2
    0
      doc/EN/app_vpn.org
  2. 19
    15
      website/EN/app_vpn.html

+ 2
- 0
doc/EN/app_vpn.org Voir le fichier

@@ -24,6 +24,8 @@ A Virtual Private Network (VPN) allows you to move your internet traffic to a di
24 24
 
25 25
 Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.
26 26
 
27
+On Freedombone the VPN is wrapped within a TLS layer of encryption, making it difficult for any deep packet inspection systems to know whether you are using a VPN or not. Since there is lots of TLS traffic on the internet your connection looks like any other TLS connection to a server, and this may help to avoid being censored. It's probably not possible for your local ISP to block TLS traffic without immediately generating a lot of irate customers, and stopping any kind of commercial activity.
28
+
27 29
 * Installation
28 30
 
29 31
 ssh into the system with:

+ 19
- 15
website/EN/app_vpn.html Voir le fichier

@@ -3,7 +3,7 @@
3 3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4 4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5
 <head>
6
-<!-- 2017-09-27 Wed 17:43 -->
6
+<!-- 2017-09-27 Wed 17:58 -->
7 7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8 8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9 9
 <title>&lrm;</title>
@@ -262,9 +262,13 @@ A Virtual Private Network (VPN) allows you to move your internet traffic to a di
262 262
 Using a Tor browser is another way to get around censorship, but there might be occasions where you don't want to use a Tor browser or where Tor relays and bridges are blocked or where you want to run internet apps which aren't within a browser.
263 263
 </p>
264 264
 
265
-<div id="outline-container-org74feb72" class="outline-2">
266
-<h2 id="org74feb72">Installation</h2>
267
-<div class="outline-text-2" id="text-org74feb72">
265
+<p>
266
+On Freedombone the VPN is wrapped within a TLS layer of encryption, making it difficult for any deep packet inspection systems to know whether you are using a VPN or not. Since there is lots of TLS traffic on the internet your connection looks like any other TLS connection to a server, and this may help to avoid being censored. It's probably not possible for your local ISP to block TLS traffic without immediately generating a lot of irate customers, and stopping any kind of commercial activity.
267
+</p>
268
+
269
+<div id="outline-container-org778c839" class="outline-2">
270
+<h2 id="org778c839">Installation</h2>
271
+<div class="outline-text-2" id="text-org778c839">
268 272
 <p>
269 273
 ssh into the system with:
270 274
 </p>
@@ -284,9 +288,9 @@ Only use ports 443 or 80 for VPN as an <i>absolute last resort</i>, since doing
284 288
 </div>
285 289
 </div>
286 290
 
287
-<div id="outline-container-org1a94be0" class="outline-2">
288
-<h2 id="org1a94be0">Usage</h2>
289
-<div class="outline-text-2" id="text-org1a94be0">
291
+<div id="outline-container-org2cfcc49" class="outline-2">
292
+<h2 id="org2cfcc49">Usage</h2>
293
+<div class="outline-text-2" id="text-org2cfcc49">
290 294
 <p>
291 295
 When the installation is complete you can download your VPN keys and configuration files onto your local machine.
292 296
 </p>
@@ -331,9 +335,9 @@ You should see a series of messages with "<i>Initialization Sequence Completed</
331 335
 </div>
332 336
 </div>
333 337
 
334
-<div id="outline-container-orgf3e0fef" class="outline-2">
335
-<h2 id="orgf3e0fef">Changing port number</h2>
336
-<div class="outline-text-2" id="text-orgf3e0fef">
338
+<div id="outline-container-orgc7282cd" class="outline-2">
339
+<h2 id="orgc7282cd">Changing port number</h2>
340
+<div class="outline-text-2" id="text-orgc7282cd">
337 341
 <p>
338 342
 Avoiding censorship can be a cat and mouse game, and so if the port you're using for VPN gets blocked then you may want to change it.
339 343
 </p>
@@ -344,16 +348,16 @@ Avoiding censorship can be a cat and mouse game, and so if the port you're using
344 348
 </div>
345 349
 
346 350
 <p>
347
-Select <b>Administrator controls</b> then <b>App Settings</b> then <b>vpn</b>. Choose <b>Change TLS port</b> and enter a new port value. You can then either manually change the port within your VPN configuration files, or download them again as described in the <a href="#org1a94be0">Usage</a> section above.
351
+Select <b>Administrator controls</b> then <b>App Settings</b> then <b>vpn</b>. Choose <b>Change TLS port</b> and enter a new port value. You can then either manually change the port within your VPN configuration files, or download them again as described in the <a href="#org2cfcc49">Usage</a> section above.
348 352
 </p>
349 353
 </div>
350 354
 </div>
351 355
 
352
-<div id="outline-container-org98985f3" class="outline-2">
353
-<h2 id="org98985f3">Generating new keys</h2>
354
-<div class="outline-text-2" id="text-org98985f3">
356
+<div id="outline-container-orgbe4ddea" class="outline-2">
357
+<h2 id="orgbe4ddea">Generating new keys</h2>
358
+<div class="outline-text-2" id="text-orgbe4ddea">
355 359
 <p>
356
-It's possible that your VPN keys might get lost or compromised on your local machine. If that happens you can generate new ones from the <b>Administrator controls</b> by going to <b>App Settings</b> then <b>vpn</b> then choosing <b>Regenerate keys for a user</b> and downloading the new keys as described in the <a href="#org1a94be0">Usage</a> section above.
360
+It's possible that your VPN keys might get lost or compromised on your local machine. If that happens you can generate new ones from the <b>Administrator controls</b> by going to <b>App Settings</b> then <b>vpn</b> then choosing <b>Regenerate keys for a user</b> and downloading the new keys as described in the <a href="#org2cfcc49">Usage</a> section above.
357 361
 </p>
358 362
 </div>
359 363
 </div>