Exactly variance. IP whitelists are just a list of IPs, if your traffic is sniffed or intercepted, they leak. Encryption is the bare minimum. People think whitelists are some security magic, but if creds or traffic isn't encrypted, it's all paper walls. User:pass isn't perfect either, but at...