[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bruce Schneier on IPsec
On Wed, 19 Jan 2000, Derrell D. Piper wrote:
> ...IPSec is clearly being deployed and I think you will find
> that a significant percentage of Internet traffic will be IPSec protected in
> just a few short years. And this is very good.
Ah, but is it? That is an assumption, not a definitely known fact. Weak
security is worse than none at all, because it breeds overconfidence.
Imminent widespread deployment of IPSec would be better news if there
weren't so many concerns about just how strong its security really is.
In particular, I fail to see that widespread deployment of systems using
56-bit DES for encryption is cause for joy. It's disgraceful that 3DES
isn't even a MUST.
Henry Spencer
henry@spsystems.net
Follow-Ups:
References: