@dequbed @soatok I so hate the IPsec fandom that keeps trying to revive it. It's like:
"What if we did encryption at entirely the wrong layer and forced everyone to rework their system configurations, network configurations, and applications all at once, rather than just putting the encryption at the right layers? Yes I am smart!!!111"