[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
null encryption
i don't know if the authors of the null encryption i-d have thought so,
but ipsec can be used as a generic tunneling mechanism alternative to
l2tp and in that application neither strong autentication nor encryption
is always be desirable.
so i would suggest changing the wording of the following sentence in the
null encryption i-d in order not to exclude the tunneling application:
As stated in [ESP], while the use of encryption algorithms and
authentication algorithms are optional in ESP, it is imperative that
an ESP SA specifies the use of at least one cryptographically strong
encryption algorithm or one cryptographically strong authentication
algorithm or one of each.
-- juha
ps. i'm not on ipsec list.
Follow-Ups: