On Sat, 11 Oct 2014 13:38:49 -0400 Ian Grant wrote: > No, the "pre-shared keys" are communicated over the VPN, as are the > keys which encrypt the VPN's own data as it appears in the actual TCP > packets which carry the tunnel through which the VPN operates.
Perhaps I have missed something but if you have a ssh tunnel or something then just put that in front of the service without increasing your attack surface.