Tinc encryption with intermediate hosts

[Guus Sliepen]

On Sat, Aug 05, 2017 at 01:30:16PM +0000, Jan Ernsting wrote:

> So my topology looks like this:
> 
> [n1]->[host1]<-->[host2]<-[n2]
[...]
> But how are the packets encrypted?
> 
> Are they really peer to peer encrypted from node1 to node2, or are they 
> wrapped into another encrypted packet between host1 and host2?

That depends. If you run tinc 1.1 on both node1 and node2, then they
will use end-to-end encryption. However, if you use tinc 1.0, then
packets are encrypted hop-by-hop.

-- 
Met vriendelijke groet / with kind regards,
     Guus Sliepen <guus at tinc-vpn.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20170812/8b06989c/attachment.sig>