[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: New XAUTH draft
Stephane Beaulieu wrote:
> > Perhaps more importantly, I was also referring to the stability,
> > analyzability, and other security-related properties of IKE. I think
> > adding proxy servers for even 1 (let alone 16) secondary
> > authentication
> > protocols substantially impacts upon the security
> > characteristics of the
> > implementation.
>
> As does setting up X SAs for each remote user.
>
I'm missing the point again, I think. What is it about setting up
multiple SAs (2 in this case) which is insecure, and how is this
different than rekeying?
Scott
References: