DGLInfo: Microsoft Windows NT PPTP Security Attacked

PPTP, Is It Secure?
Industry expert attacks Windows NT security

Online auctions since 1996! Ranked #1 by Yahoo!
400MHz systems with a starting bid of just $1.00!
The latest hardware and software products come to auction every day.
Why pay retail for your next components, system, or software?
Pay "market" price with your bid at Auction Sales!

Internet Poll

Have you attended a seminar via e-learning?

	yes
	no
poll archive

Microsoft Windows NT PPTP Security Attacked
by Dave Murphy
ISSN 1535-3613

A top industry cryptographer said the key protocol within Microsoft's Windows NT is significantly flawed. Data can be relatively easily compromised when traversing a virtual private network (VPN) using Microsoft's Point to Point Tunneling Protocol (PPTP).

Bruce Schneier, the noted cryptographer, said the PPTP in Windows NT 4.0 is so broken it can't be fixed with patches. Schneier is well know for authoring a popular cryptography textbook. "I believe it's fundamentally broken," said Schneier.

Microsoft disputes Schneier's assertion.

Schneier advises network administrators wishing to setup a VPN to use software that supports the IPSec standard, not PPTP.

Microsoft said NT version 5.0, due next year, will support both protocols.

Damar Group, Ltd. helps business use technology.

ITINFO is again accepting sponsors. Sponsor messages are included in ITINFO's email newsletter and are permanently posted to DGL's website and online reference areas.

ITINFO is an electronic publication of Damar Group, Ltd., publisher of Training Express computer learning guides. Comments and submissions to info@dgl.com.

Previous issues are on our website at dgl.com/dglinfo.

updated June 2, 1998
http://dgl.com/dglinfo/1998/dg980602.html