[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: (NAT) Re: Interactions between IPSEC and NAT
Vinod Valloppillil writes:
>
> >> HTTPS through a NAT, for example, is perfectly reasonable
>
> >HTTPS doesn't embed things like ports into the communications stream,
> >so it can be NATed. SSL is the security layer HTTPS uses, but SSL !=
> >HTTPS -- other protocols over SSL will not behave so nicely.
>
> But my example of HTTPS through NAT is a case where you both both NAT
> features and end-to-end security. My point was to demonstrate the
> independance of IP addr/ports from end-end security.
You've demonstrated nothing of the sort. All you've shown is that
there exists a particular protocol that does okay that way. Unless you
are proposing that the only application for the internet is web
service over HTTPS, I'm afraid you'll have to accept that some
protocols do not and cannot play well with both NAT and end to end
security.
Perry