Phil Karn says: > These are all advantages of IP-level encryption over doing it above > TCP. The main disadvantage is overhead -- Van Jacobsen TCP/IP header > compression breaks. Of course, one could simply compress the encapsulated packets -- after all, in some sense any pair of hosts running swIPe between them have produced an odd sort of point to point link between them. Perry