What is Network Layer Security?
Encrypt (or authenticate) everything above the network layer header.
Completely transparent to applications.
TCP- or application-level retransmissions handle deleted or damaged packets.
Generally must modify protocol stack or kernel; out of reach of application writers or users.