{"id":23375,"date":"2019-04-29T21:53:31","date_gmt":"2019-04-29T16:23:31","guid":{"rendered":"https:\/\/mywindowshub.com\/?p=23375"},"modified":"2019-04-30T00:37:43","modified_gmt":"2019-04-29T19:07:43","slug":"why-the-pptp-vpn-protocol-is-not-secure","status":"publish","type":"post","link":"https:\/\/mywindowshub.com\/why-the-pptp-vpn-protocol-is-not-secure\/","title":{"rendered":"Why The PPTP VPN Protocol Is Not Secure?"},"content":{"rendered":"\n
PPTP means point-to-point tunneling protocol. It was introduced in 1995 as a VPN protocol. PPTP was released about a decade after its invention. Prior to PPTP, PPP was the VPN standard. PPP did not have a tunneling feature. PPTP began as a protocol that was implemented on Windows systems. In quick order, it became the go-to protocol for a number of platforms. Although PPTP protocol is offered on just about every VPN service, it is not secure. The following are a few of the reasons why. PPTP dates back to Windows 95. This security protocol has not been updated as frequently as newer protocols have that use strong encryption. This is why free VPN services or very cheap VPN services will offer PPTP protocol<\/a>. It\u2019s old, so doesn\u2019t cost them anything. Most free VPNs are not concerned about keeping the client’s information secure. Their goal is to make money off of the client’s data. When a VPN solely relies on PPTP protocol, their client’s data is at risk of getting leaked. Some might counter that PPTP is fast. And that\u2019s true. A VPN that solely uses PPTP is not going to slow down your Internet traffic like other protocols, such as OpenVPN. But that\u2019s because PPTP doesn\u2019t have strong encryption, so it is not going to slow down your Internet speed. The first flaws found in PPTP\u2019s cryptography surfaced in 1998. By 2012, so many vulnerabilities surfaced that PPTP could be broken easily using a number of tools that were readily available on the market. One expert says about PPTP that the only person who cares about using it are those who do not care about the communications they are trying to protect. Some of the flaws that were found include: \u2022\tThe possibility of decrypted data being sent through the protocol<\/p>\n\n\n\n \u2022\tPassword theft vulnerability<\/p>\n\n\n\n \u2022 Vulnerability for MITM attacks<\/a> There are two reasons why PPTP is still in use. \u2022\tOne reason is that it has come pre-installed on a number of operating systems for a long time. It\u2019s tradition. \u2022\tThe second reason is that it\u2019s easy to get going. You do not need to install anything. As you might have guessed, L2TP\/IPSec is better than PPTP. Some of the features that make L2TP\/IPSec superior include: \u2022\tThe ability to be used with 256 bit encryption keys<\/p>\n\n\n\n \u2022\tIt can use the AES cipher<\/p>\n\n\n\n \u2022\tIt can be configured so that NAT firewalls cannot block it PPTP can easily be blocked by firewalls. The only thing that PPTP has over L2TP\/IPSec is the online speed it offers. PPTP might be a good idea if you need faster speed and want the ability to get around geo blocked content. But it doesn\u2019t always work. PPTP and IPSec share some similarities. For example, they both use encapsulation technologies. However, IPSec is a whole lot more secure. PPTP is a lot more stable than IPsec. However, PPTP is a lot easier to block with the firewall. IPSec has the ability to encrypt traffic in a way that the end application is not aware of the encryption. So PPTP is faster than IPSec and a lot easier for the VPN provider to configure. When it comes to security, OpenVPN takes the cake. This protocol is able to use the AES 256 cipher. It can use any port. OpenVPN<\/a> is open source. This means that people more readily trust it than they do Microsoft, the team behind PPTP. Microsoft is already known to cooperate with the NSA. It is difficult to block OpenVPN<\/a> traffic because it\u2019s difficult to distinguish it from SSL or HTTPS traffic. OpenVPN protocol can be found on a number of respected VPN services, including NordVPN.<\/a> Of course, PPTP does better on speed than OpenVPN. There is the option to use OpenVPN on UDP to improve the speed, but it\u2019s nothing close to what you get with PPTP connections. Also, configuring PPTP is a breeze compared OpenVPN. OpenVPN can take the better part of a day to configure, depending on how experienced you are with it. Kind of, but not really. MSCHAPv1 was Microsoft\u2019s first attempt to make PPTP safer. More than a decade and a half ago, this encryption was broken. It was replaced by MSCHAPv2, and this has been shown to be weak almost since its inception. You can easily brute force attack it in a few hours. There are even online services that can break it.
<\/p>\n\n\n\n<\/figure>\n\n\n\n
<\/p>\n\n\n\nPPTP Is an Obsolete Protocol<\/h2>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n<\/figure>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\nIf PPTP Is so Insecure, Why Is It Still Being Used?<\/h2>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\nHow Does PPTP Compare to Other Protocols?<\/h2>\n\n\n\n
PPTP vs. L2TP\/IPSec<\/h3>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\nPPTP vs. IPSec<\/h3>\n\n\n\n
<\/p>\n\n\n\nPPTP Versus OpenVPN<\/h3>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\n
<\/p>\n\n\n\nCan You Make PPTP Safer?<\/h2>\n\n\n\n
<\/p>\n\n\n\n