[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Photuris questions
The initiator cannot indicate that it is willing to use MD5 or SHA for
the key hash but will only use SHA for the security association.
Is this a deliberate design decision?
As Bill Sommerfield points out, the responder can choose AH even if it
is capable of supporting ESP. The initiator should be able to
indicate early on that this will not be acceptable. The initiator
might be capable of supporting ESP, but chooses AH; possibly the
responder should be able to indicate to the responder "although you
seem to be capable of supporting ESP, you aren't using it, please do so."
Follow-Ups:
References: