I've been watching conversation on a mailing list, and it leads me to wonder if we should inform the userbase better.
Index: wg.4 =================================================================== RCS file: /cvs/src/share/man/man4/wg.4,v retrieving revision 1.10 diff -u -r1.10 wg.4 --- wg.4 14 Mar 2021 10:08:38 -0000 1.10 +++ wg.4 25 Jul 2022 16:18:24 -0000 @@ -213,6 +213,12 @@ .Nm driver first appeared in .Ox 6.8 . +.Sh CAVEATS +WireGuard uses uncertified cryptographic algorithms and uncertified random +number generators, so the security properties cannot be gauranteed. +Consider using +.Xr ipsec 4 +instead, where certified cryptographic algorithms are the norm. .Sh AUTHORS .An -nosplit The