

That’s kind of what I meant. Implementing both of those things together on a VPN is unique AFAIK.
I would imagine if you could trust the entry node that would also mitigate a significant amount of risk, no? I’m not deeply knowledgeable on the subject just FYI


Well done.