[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IPSEC requirements
> Just give me IP encryption and some integrity checking
>and that's enough. All the authentication stuff is useless and
>belongs at the application layer. No way in hell am I gonna
>trust your kernel on a remote machine to authenticate a user.
>Not until we have high quality host-based security. If I'm that
>gullible, I may as well just use rlogin and "privileged ports."
If you don't trust a particular kernel, how can you trust an
application that runs above it? The kernel is god in just about every
OS I know. An evil kernel could easily poke into any application and
suck out its secrets, such as crypto keys.
Phil
References: