4 ms·
Don't tell people to not want the most basic amount of security implemented within the protocol. The rest of the Linux kernel networking stack logs more verbos
by candiddevmike 4y ago
Don't tell people to not want the most basic amount of security implemented within the protocol. The rest of the Linux kernel networking stack logs more verbosely than WireGuard, and it supports packet filtering. If you had someone compromise your WireGuard mesh, you'd never know.
These are oversights, and it's OK for software to have them, but they need to get added in the future. Requiring users to layer this stuff on top of WireGuard creates security footguns. WireGuard's implementation isn't set in stone, it should be improved.