[Spivak]

Yeah, I'm not sure what the parent was getting at separating them out since from the clients perspective they're the same. I guess they mean that getting a tcpcrypt connection on your server isn't a guarantee that there isn't a middlebox either.

[PowerBar]

They were alternative ways to prevent a MITM, but they both have solutions solved by existing TLS.