Recently I was developing a web-based application that could accessed from the browser. I am very concerned about security, I have already enabled https, but I was wondering :
Can you access a site from a web-browser with the payload being encrypted at the network layer using IPsec?
Read with caution:
As I understand IPsec it is used to ensure bidirectional authentification. SSL/TLS only ensure authentification for the server. You'd have to set up both server and client to make IPsec happy. Though you might configure it to ignore one direction there is simply no standard way of doing so (e.g. how the browser tells the kernel to use IPsec)
So, I guess it's theoretically possible but not practically.
If anyone got more insight than me, I'd be happy to hear it, too.