Comment by TomatoCo

1 day ago

Although there are some places you want that! WireGuard is often described as cryptographically opinionated because it doesn't even bother trying to negotiate crypto primitives which makes it immune to downgrade attacks. Though, to be fair, that also means that if its primitives ever do get broken you need to roll out an entirely new release.