Comment on How much do you secure a home server that's only accessible with VPN?

<- View Parent
sandwichsaregood@lemmy.world ⁨1⁩ ⁨day⁩ ago

I agree that there is some value to obscurity generally, but Wireguard already evades port scans and fingerprinting. Unless a packet is signed with a known key, it gives no response to traffic, so scanners and fingerprinters see a closed port. You ISP can identify WG traffic while you are connected by inspecting your traffic, but random scanners won’t see anything. Look on shodan, you won’t see Wireguard.

original
Sort:hotnewtop