[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IPv6 Security Last Call Initial Questions (per user keying)
On Mar 31, 12:33, Dan Nessett wrote:
% When per-user keying is used, there will be changes
% required to the socket/TLI/XTI/etc/ interfaces so that an
% application can pass an SPI and security context information
% to the kernel.
I disagree.
Changes to the Socket/TLI/XTI interfaces will be needed in any event
so that applications that are "security-aware" can request the
particular security services that they desire.
A document that discusses some of the API issues is already online
with a filename similar to "draft-mcdonald-sec-api-*.txt". I should
mention that the Security API draft is a drafty draft mainly out to
focus discussions. Also, the IETF doesn't standardise APIs so that
would become an Informational RFC if it went to RFC in the future.
Ran
atkinson@itd.nrl.navy.mil
References: