double vpn

[bwanaaa]

I think about using the internet like communicating over a bare wire. Anyone between the source and the destination can tap into the conversation simple by touching the bare wire. A VPN is like putting insulation over the wire. Is more better in this case? Would a second layer of VPN (if this even makes sense) add security? In other words, running something like HidemyAss AND TunnelBear.

 

[imagoon]

I think about using the internet like communicating over a bare wire. Anyone between the source and the destination can tap into the conversation simple by touching the bare wire. A VPN is like putting insulation over the wire. Is more better in this case? Would a second layer of VPN (if this even makes sense) add security? In other words, running something like HidemyAss AND TunnelBear.

You can tap the wire without breaking the insulation also.

Dual VPN however isn't going to be that much more secure. You would be better off just changing the IKE key more often.

 

[bwanaaa]

Well I tried it and it does not work. Checking my ip location reveals that it does not change when I start the second VPN . Further, when I disable the second VPN I am left bare.

 

[imagoon]

Well I tried it and it does not work. Checking my ip location reveals that it does not change when I start the second VPN . Further, when I disable the second VPN I am left bare.

I think you mean: "I tried it with my applications and they didn't support it." I can run a VPN tunnel through another VPN tunnel in my test lab but I am using IKE + IPSEC on Cisco gear.

 

[RadiclDreamer]

Well I tried it and it does not work. Checking my ip location reveals that it does not change when I start the second VPN . Further, when I disable the second VPN I am left bare.

Its not going to change your "location" by re-keying, you are just lowering the amount of time an attacker would be able to intercept your data if the key was breached.

 

[bwanaaa]

my mistake is trying to use automatically preconfigured services. If hidemyass is calling its server in romania and tunnel bear is calling its server in france-i am not really running a tunnel within a tunnel. i am running two conflicting clients. duh.

i think it would be better just to increase the key length. or as suggested change the key often.although these preconfigured services don't expose this functionality