@@ -755,6 +755,8 @@ Rationale: More features mean more code and more interfaces mean attack surface.
***[COM-1]** Usage requires a few additional features related to tunnelling encrypted traffic
***[COM-2]** Usage requires many additional features
Guidance: At present, the complexity of the implementation and the exposed interfaces are accounted for in a single risk factor. This is sufficienty for the security analysis in the present document but may need to separated into two risk factors for future versions.
### C.2.10 RF-CON: Connectivity offered
Description: Whether the VPN connects different endpoints to each other via a private network or simply provides a tunnel from a single endpoint to a public network