Can you describe what you&#x27;re worried about?<p>The connection is set up over SSH, and mosh-client generates a random AES-OCB key and sends it to mosh-server. Packets are sent over UDP, protected using authenticated encryption, and discarded if they fail integrity protection (which is fine, since packets could just be dropped and perhaps corrupted anyway because of bad network connections). Replayed packets are invalid. At that point the client&#x27;s IP address no longer matters, since it&#x27;s the only entity with the key. The server accepts valid packets from anywhere, and also sends packets to the IP address that most recently sent it a valid packet.<p>This should as much protection as an SSH connection over TCP. One thing I&#x27;d worry about is whether the server or client can be DoS&#x27;d with invalid packets. Is there anything else that seems concerning?