[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ipsec] FW: Key Recovery

To: Robert Moskowitz <rgm@ns.ncsa.com>
Subject: Re: [ipsec] FW: Key Recovery
From: Tom Markham <tom_markham@securecomputing.com>
Date: Thu, 16 Apr 1998 23:45:52 -0500 (CDT)
Cc: CJ Gibson <cjgibson@semaphorecom.com>, ipsec@tis.com, ipsec@ns.ncsa.com, margaret <mgaynes@semaphorecom.com>, prashant <prashant@semaphorecom.com>
In-Reply-To: <199804161410.KAA11010@portal.ex.tis.com>
References: <0171F2F8F9E5D011A4D10060B03CFB440CAF1C@scc-server3.semaphorecom.com>
Sender: owner-ipsec@ex.tis.com

The key recovery alliance (www.kra.org) has developed an approach for
performing  key recovery in ISAKMP. The approach does not require
communication with the key recovery center for each ISAKMP exchange.

I expect that the key recovery alliance will be releasing the draft
specification in about 1 month. Stay tuned.

At 4:09 PM -0400 4/9/98, Robert Moskowitz wrote:
>At 12:00 PM 4/9/98 -0700, CJ Gibson wrote:
>
>I would recommend not to touch this approach to Key recovery.  It alters IKE.
>
>Vach Kompella (kompella@us.ibm.com) has a proposal to vendors to use an
>ICMP message to the KRC.  This approach is orthogonal to IKE and thus can
>be delevoped on a vendor by vendor basis.
>
>>Can anybody out there help us with this issue of Key Recovery ?? Have
>>any of you decided to implement this ??
>>Thanks in advance,
>>					CJ

Tom Markham

References:

FW: Key Recovery

From: CJ Gibson <cjgibson@semaphorecom.com>

Re: [ipsec] FW: Key Recovery

From: Robert Moskowitz <rgm@ns.ncsa.com>

Prev by Date: Re: Last Call for IPSEC
Next by Date: Slides for the IPSEC wg meeting minutes
Prev by thread: Re: [ipsec] FW: Key Recovery
Next by thread: Re: FW: Key Recovery
Index(es):
- Main
- Thread