This is a great write up.<p>Also, for those saying that TLS is a panacea: encrypting and&#x2F;or HMAC&#x27;ing all TCP data in and out of a box is operationally ridiculous unless you&#x27;re in some sort of ultra high security environment.