[Freedombox-discuss] public + private http services

[Eugen Leitl]

On Mon, Jul 15, 2013 at 05:59:51PM +0200, Anders Jackson wrote:

> > 2. The private network produced by my authenticated friends connecting
> > to my FreedomBox to use services I provide.
> 
> IpSec is part of IPv6, so that should be a possible solution. We "just"
> need to distribute keys.

You don't need that if you use BTNS. Yes, it's not secure against
active (MITM) attacks, but it is secure against passive attacks,
and adds an additional low-level layer of security.