@Drudge
That's a pretty solid plan, although I'd use WireGuard instead of OpenVPN. Otherwise, step 1 may take a lot of time, whereas WG makes all that dumb simple. There are even tools (eg dsnet) that generate client configs that work with the WG Android client.
One fantastic thing about WG is not having to dick with CAs or CA authorities.
sxan
joined 1 year ago