[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: What can applications running over ipsec assume?



 > My own view is that the ipsec layer should pass the security characteristics
 > of a received packet up to the transport layer.  It, in turn, must
 > match those characteristics against what the user has requested.  Packets
 > that don't meet those requirements are dropped.
 > 
This seems sensible. It implies modifications to APIs at 2 layer boundaries.
I guess if there was work proceeding to define these API changes you would
have mentioned it...

Bob Smart


Follow-Ups: References: