2014.06.21 19:12:43 (480397915920551937) from Daniel J. Bernstein:
I know that the protocol has secure options. My question is about the user experience. IPsec HOWTOs seem to leap from easy PSK to cert hell.