brent saner via plug on 2 Aug 2025 13:53:14 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] VPN Recommendation Wanted

On Sat, Aug 2, 2025, 16:25 Jonathan Caicedo <jonathan@jcaicedo.com> wrote:



I don’t want to split hairs - whatever you think WireGuard is or isn’t - it can help fulfill Casey’s needs - so it’s worth including in the conversation. 


I'll stick with the IETF on this, thanks. RFC 4949.

All VPNs are tunnels. Not all tunnels are VPNs. No VPN is a peer-to-peer tunnel. No peer-to-peer tunnel is a VPN. Yes, everyone calling WireGuard a VPN is still wrong. Inattention to detail, lax terminology usage, and insistence upon their proliferation leads to breakage. Welcome to prod.

Using a VPN vs. a peer-to-peer tunnel has direct impact on the context of the client and the scope of the link *which is why there is a distinction in the first place*.

A P-to-P, *by default and intent*, is a 1:1 connection.

A VPN, *by default and intent*, is a 1:(n<->n) connection.

The former requires inherent trust of a single foreign host. The latter requires inherent trust of multiple - potentially an unknown number- of foreign hosts.

Learn something instead of doubling down on being incorrect.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug