OpenVPN: enough security with default settings?

[yelo3]

I'm wondering if the default settings of the Open VPN server is enough secure, or if we'd better change some default to something more strong

Thanks

 

[RMerlin]

Depends if you are trying to secure your home access (secure enough) or financial transaction (not enough).

When it comes to security, the sky is the limit. It's about striking a balance between security and performance. AES-128-CBC with a 1024-bit certificate is good enough for home. A bank might want to use AES-256-CBC or higher, with SHA256 signatures, and a 4096-bit certificate - it will cost you a lot in terms of performance however.

 

[yelo3]

Thanks