[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Field Variance Analysis
> The third is one that many people discount, claiming that IPSO is
> just broken and shouldn't be a factor. I'm not here to judge IPSO, but
> certain government organizations have a large IPSO deployed base and they
> won't buy into IPsec at all if it leaves them SOL with IPSO. Both the second
> and third on this list implies no alternative but to protect IPv4 options
> if we are going to defend against these attacks. If we aren't going to
> defend against these attacks, then we can talk in terms of not authenticating
> options.
Might not the certain government organizations use encapsulation with
a MD5 transform as a method of protecting the IPSO?
Follow-Ups:
References: