If I have access to one of the endpoints I can read the decrypted traffic. It doesn&#x27;t necessarily break the VPN, but it kills its purpose.<p>In other words, why won&#x27;t you go the easy route and just sniff the traffic where it&#x27;s already the decrypted?