# FEATURES AND LIMITATIONS #


Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this - Secure Tactical VPN Client won't work on these devices!
Uses the IKEv2 key exchange protocol (IKEv1 is not supported)
Uses IPsec for data traffic (L2TP is not supported)
Full support for changed connectivity and mobility through MOBIKE (or reauthentication)
Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739
VPN server certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the server can also be imported directly into the app.
IKEv2 fragmentation is supported if the VPN server supports it.
VPN profiles may be imported from files.