I've built more than one VPN network over the years - and I don't use the ones I built. My philosophy has always been that I can't trust the network after I no

I've built more than one VPN network over the years - and I don't use the ones I built. My philosophy has always been that I can't trust the network after I no longer own it - and if the code isn't open. The hard reality is that you have no way of knowing what's being logged if you don't have full access to the servers. I've always pushed for leaving VPN servers on operating systems running in read-only, on read-only disks, and open to the world (i.e customers who log in). It's one of the best forms of real transparency that I can think of. Funny, I never won that one.