UDP tunnels are the main feature, way lighter than wireguard, also OpenID auth.
Wireguard (and certainly every VPN protocol worth your attention) runs on UDP. TCP-over-TCP is a disaster, no sane person does that.
And what's "lighter" than Wireguard? It's about as simple as it can get (certainly simpler than QUIC).
> also OpenID auth
Wait, what? Does it actually work?
If yes, this is a huge deal. This potentially solves the ungodly clusterfuck of SSH key/certificate management.
(I don't know how OpenID is supposed to interact with private keys here.)
Wireguard (and certainly every VPN protocol worth your attention) runs on UDP. TCP-over-TCP is a disaster, no sane person does that.
And what's "lighter" than Wireguard? It's about as simple as it can get (certainly simpler than QUIC).
> also OpenID auth
Wait, what? Does it actually work?
If yes, this is a huge deal. This potentially solves the ungodly clusterfuck of SSH key/certificate management.
(I don't know how OpenID is supposed to interact with private keys here.)