Re: Does IPsec undermine PKI?

["Theodore Y. Ts'o" <tytso@MIT.EDU>]

   From: "Perry, David" <perry@timpo.osd.mil>
   Date: Thu, 25 Jun 1998 10:36:47 -0500

   2.2.1 The IPSec methods used to establish sessions between end points
   differ from those that are used in PKI. PKI operates at the application
   level and IPSec operates at the IP level. 

It's clear that whoever wrote this point paper doesn't know what the
heck they are talking about.  At a guess, they are equating "PKI" with
something like SSL (the Secure Sockets Layer, used by secure http), when
in fact IPSEC and SSL both take advantage of a Public Key Infrastructure
(PKI) --- namely certificates and some kind of hierarchy of
Certification Authorities (CA's).

							- Ted

---

References:

• Does IPsec undermine PKI?
• From: "Perry, David" <perry@timpo.osd.mil>

---

• Prev by Date: Re: KEA and SKIPJACK declassified
• Next by Date: More questions on ID types
• Prev by thread: Does IPsec undermine PKI?
• Next by thread: Re: Does IPsec undermine PKI?
• Index(es):
  • Main
  • Thread