PPTPD security

[Greg Woods]

On Mon, 2012-04-02 at 14:53 +0200, Luc MAIGNAN wrote:

> I've seutp a PPTPD daemon to let an external iPad access to my network 
> via a tunnel.
> 
> All seem to work fine.
> 
> But I wonder if it is enough secure ?

http://www.schneier.com/pptp.html

As usual, the answer to "is this secure enough" is "it depends on how
valuable whatever you are protecting is". PPTP is riddled with design
flaws. None of those attacks are trivial, but a skilled attacker can
probably break just about any PPTP installation. That is why use of PPTP
is banned at my workplace.

--Greg