VPN gotchas Any VPN needs to authenticate it's peer PSKs must be sent via a private secure mechanism. Public keys must be sent via an authenticated mechanism, but need not be sent privately