[solved]Which of these VPN protocols is the safest?

[Marlo]

Hello@,
for a vpn connection I have the choice between:
PPTP
L2TP
SSTP
IKEv2
OpenVPN UDP
OpenVPN TCP

My question is: Which of these protocols is the safest?
Is it possible to rank them in terms of security? Like 1. 2. 3.
On the Internet, there are the most diverse views on this.
Sometimes had I think it's like a question of faith.

I am grateful for every hint and thank you already now.
Ma
_________________
------------------------------------------------------------------
http://radio.garden/

[NeddySeagoon]

Marlo,

VPN products usually use a combination.
L2TP provides a tunnel, with no security at all, so its used with something else to provide security.

Who will be running the remote VPN endpoint?
You need to be able to trust them, since they will be decrypting all your VPN traffic. You didn't ask about that.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

[Marlo]

[1clue]

The only one of those things which is an encryption cipher is ikev2. The rest of them are protocols which may or may not be coupled with encryption.

Which cipher you use depends on who you don't trust, who (that you don't trust) has access to the route you're sending packets through, and whether the cipher is known to be hacked, or how easy it will likely to be to hack it.

The reason for the diverse opinions is that different people want to hide information from different groups, and there is no consensus as to who the biggest threat might be.

Your only way out of this is research and informed choice.

[Marlo]

[NeddySeagoon]

Marlo,

Your android will offer a choice. Loox under Settings/Wireless &/Networks. One of the options is VPN

I get PPTP and L2TP/IPSec with various secret sharing systems.

If you want Windows compatibility you need L2TP/IPSec, probably with a Pre Shared Key (PSK).
IPSec provides the security and L2TP provides the tunnel.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.

[1clue]

PPTP has been tagged as unsafe by some software.

I use OpenVPN in tap mode. You said udp or tcp, that's not how it works.

OpenVPN has two main modes: TUN vs TAP.

TUN is a conventional tunnel implemented in TCP. Your client looks like a computer from another network.

TAP is an emulation of a network card on the remote network. Your client looks like a computer directly attached to the remote network. You have access to pretty much anything that a local system would have access to, unless specifically barred by firewall rules for the vpn connection.

Some software refuses to allow connections from a remote network in spite of what your firewall says. For example, IPMI server control, or ESXi management (I think) has this limit. If you use TUN you can't access those devices. If you use TAP you can.

[1clue]

[Marlo]

[1clue]

TAP is slower.

[Marlo]

Ah, here. I got it:

[havana8]

I also consider PPTP as unsafe. Perhaps this article might be beneficial as to give you a brief info on different network protocols and some of the disadvantages they have. There is also a paragraph for the perks of UDP and TPC. Personally, I would suggest using an OpenVPN

[chiefbag]

[Marlo]

[1clue]

[toofied]

[depontius]

[krullis]

Avoid pptp and l2tp, they have been unsecure for long time and should not be used anymore. Even apple have remove support for them in there OS as they not secure.
OpenVPN should be most secure if its configured properly.
SSTP should be OK aswell but is only supported in Windows I think

[szatox]

l2tp is not supposed to be secure. That's why it's usually coupled with ipsec.
What's so bad about pptp? I'm curious