Embed Notice

@froge "even if you trust both ends of the connection you should still install security relevant patches to mitigate issues on the network or in the protocol itself,"

The app doesn't speak the protocol! The Linux kernel does. The app is purely a network configurator tool (unless you're running a very old kernel where a userspace implementation is used instead). The only input it processes is what you type in the UI.

But also, there is no room for vulns in the wg protocol. I've implemented it from scratch before. It has no gratuitous syntax or options. Fixed form cryptographic framing.