I work at IVPN. WireGuard out of the box indeed have few issues related to privacy which require additional effort to overcome. Forward secrecy is one of them.

I work at IVPN. WireGuard out of the box indeed have few issues related to privacy which require additional effort to overcome. Forward secrecy is one of them. We created a document where we've described all of the known issues related to privacy when using WireGuard up to date and how we solve them [0]. Talking about forward secrecy specifically, IVPN client apps for all platforms do automatic key rotation every 7 days by default (which can be changed to as often as every day). It makes it impossible to correlate any traffic with customers after keys were rotated. [0] - https://www.ivpn.net/knowledgebase/254/Using-WireGuard-for-Privacy-Protection.html https://www.ivpn.net/knowledgebase/254/Using-WireGuard-for-P...