Over VPN - but is that key exchange safe? Is that proprietary crypto system in use at $diplomacy backdoored with a weak RNG?