[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: ESP over ESP was Re: ICMP Security Failures
> An implementation of ESP that supports the recursive encapsulation
> of ESP will generally not be eligible for an export license which
> permits the product to the general public outside of the United States.
Since the United States at present generally only allows export of
products that are breakable even by individual hackers, not to mention
organized criminal, major corporations, and governments, in my opinion
it is better to not include stuff in the standard that would undermine
its original goals by rendering it again insecure. If we are seeking
to solve the security problems on the internet, please lets do it
right this time.
If the US corporations cannot export products that provide a decent
level of security, I am sure there will be other companies outside the
United States who will. The techniques themselves are very
widespread. (Some information on foreign availability can be found at
http://www.cs.hut.fi/crypto.)
Tatu
References: