[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Karen Seo: Thomas Narten -- clarification, etc.]



Ran, sorry for being so naive but could you please
point me to some reference material that articulates
differences in security properties of the two so that
I can use these two mechanisms appropriately.

Thanks in advance

-----Original Message-----
From: owner-ipsec@ex.tis.com [mailto:owner-ipsec@ex.tis.com]On Behalf Of
Ran Atkinson
Sent: Wednesday, May 06, 1998 9:48 PM
To: Patel, Baiju V
Cc: 'ipng@sunroof.eng.sun.com'; 'ipsec@tis.com'; 'jis@MIT.EDU'; 'Thomas
Narten'
Subject: RE: [Karen Seo: Thomas Narten -- clarification, etc.] 



Baiju,

  Tunnel-mode ESP does NOT provide the same security properties as
AH.  Wishing that it did and marketing it as if it did, doesn't make
it true.  Folks need to understand what security properties they
desire, then use the appropriate mechanism(s) to provide those properties.

Ran