[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bellovin's attack and others like it
"Avi Rubin" says:
> It look like there are two approaches out there, using a UDP
> port for key management, or having separate layers for key mgmt
> vs. data packets.
>
> I'd like to see a constructive discussion of the tradeoffs using
> each technique from Pau-Chen, Hilarie and others.
I'd say that there isn't much of a good reason not to use a UDP
port. I've heard arguments to the effect that this somehow causes
layer mixing but my design doesn't seem to suffer when things are done
this way.
Perry
Follow-Ups:
References: