Sanctum || A pq-safe and sandboxed VPN daemon (github.com)

Sometimes I feel like I am a capable software engineer and then I come across work like yours and realize how much I don’t know.

Honestly don’t understand this or can even fathom how great this is but good luck!

One of the best pieces of code that I've seen in a while. Thanks for sharing

Very impressive design of the application -- haven't looked into the crypto yet. It reminds me a bit of the design the OpenBSD folks made with letskencrypt/acme-client: https://kristaps.bsd.lv/acme-client/

I just love the design of this code. If more software were written with such keen regard for principle of least-privilege, the entire sham "cyber security" industry might not need to exist.