[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (IPng) More Endpoint Attributes

To: Theodore Ts'o <tytso@mit.edu>
Subject: Re: (IPng) More Endpoint Attributes
From: Steve Kent <kent@BBN.COM>
Date: Thu, 16 Mar 95 12:34:45 -0500
Cc: Andy Bayerl <bayerl@zk3.dec.com>, ipsec@ans.net
In-Reply-To: Your message of Wed, 15 Mar 95 19:04:14 +0500. <199503160004.AA18957@interlock.ans.net>


In the context of security labels, e.g., in an MLS environment, other
network layer security protocols have tended to allow a security
association to be labelled either implicity, at one level for its
duration, or have provided explicit, per-packet, security labels.  I
think we discussed this earlier for IPSP and decided that implicit,
per-session labeling was most generally useful for the intended IPSP
audience.  However, if there is a strong interest in the need for more
dynamic, per-packet attribute labeling, then some form of option to
carry those attributes might make sense.

Steve

References:

Re: (IPng) More Endpoint Attributes

From: Theodore Ts'o <tytso@MIT.EDU>

Prev by Date: Re: (IPng) More Endpoint Attributes
Next by Date: Re: (IPng) More Endpoint Attributes
Next by thread: Re: (IPng) Proposed Standard or no?
Index(es):
- Main
- Thread