[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: is manual keying mandatory
I feel strongly that manual keying should continue to be a MUST.
There are going to be some times when the full complexity of ISAKMP
won't be necessary; having manual keying universally available will
improve interoperability and configurability in those situations...
It also leaves makes more room for experimentation with new key
management techniques, since a new key management system can be
grafted on through the "manual" key management interface.
It's also useful in testing to ensure that the transforms, etc., are
in a position to really reject things like weak keys.
All in all, it makes for a more open, modular system.
- Bill
Follow-Ups:
References: