[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Status of IPSEC Key Management
In message <199609092151.RAA00478@thunk.orchard.medford.ma.us>, Bill Sommerfeld writes:
> SKIP-style in-band keying is good because it doesn't add more
> round-trips. It's bad because it involves extra overhead on each
> packet.. SKIP's 20-28 bytes/packet (assuming 8-16 byte traffic keys)
> adds ~50% to the size of a TCP ACK.
Are there really places in the Internet where this is still a problem? I
suppose those asymmetric bandwidth cable modems might be a problem; any
others?
--
Harald Koch
chk@border.com
Follow-Ups:
References: