MacOS Sierra, the latest version of the Apple OS has been out for a little while.
One of the most disruptive changes in this release is the removal of support for the PPTP protocol, used for establishing VPN connections which, for a long time, was the default way of doing VPNs in Microsoft systems.
While I have heard some people complaining about it, as a security professional, my opinion is that it was about time they did so. The PPTP protocol is not secure - it is not that the implementation is not secure, the actual protocol has flaws in its design that make it insecure. The only way to make it secure is to stop using it, so Apple supporting stop for it will force laggard IT departments to solve this issue once and for all.
For more information about the protocol, please see the following links:
- Point-to-Point Tunneling Protocol on Wikipedia.
- A Death Blow for PPTP, analysis of the issues with the protocol on H-Online.
- A Security Stack question with good links about the issues with PPTP.
No comments:
Post a Comment