Hacker News Reader

There is speculation it compromised the cryptography used for VPN traffic, enabling someone with access to that traffic to decrypt it through brute force:

https://twitter.com/matthew_d_green/status/67787100435437158...

If I have access to one of the endpoints I can read the decrypted traffic. It doesn't necessarily break the VPN, but it kills its purpose.

In other words, why won't you go the easy route and just sniff the traffic where it's already the decrypted?

Some VPN's terminate SSL at this point. So the connection from the client to the server is encrypted, but the internal network traffic in the data center is sent unencrypted on the private network.