Why Not SSL or TLS? SSL does't work for UDP. SSL doesn't protect headers from modification, leading to possible DoS attacks. SSL requires changes to all applications. SSL isn't amenable to hardware implementations. SSL can't easily do VPNs.