@@ -757,7 +757,7 @@ Rationale: More features mean more code and more interfaces mean attack surface.
Description: Whether the VPN connects different endpoints to each other via a private network or simply provides a tunnel from a single endpoint to a public network
Rationale: Different connectivity requirements create different risks and mitigations.
Rationale: More endpoints able to connect to each other within the private network means more risk of compromise via the shared private network connectivity and greater privileges often granted to endpoints sharing the private network.
***[CON-0]** Usage is a single endpoint connecting only to a public network
***[CON-1]** Usage is one or more endpoints connecting to other endpoints or hosts via a private network