Embed Notice

@dalias @soatok For that point to land you do need to explain why it is "entirely the wrong layer".
Because if you want to add encryption transparent to all higher layers with the goal to emulate the access safety of a physically secured network — which on the surface is what most VPNs do try to do — then it is entirely the *right* layer. It just turns out most of our problems are not shaped like that.