[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bruce Schneier on IPsec
>I thought ESPNULL might be useful for things like IETF web sites where you
>might be retrieving public documents that you want to make sure you receive
>unaltered but aren't concerned about the confidentiality of the traffic.
This sort of thing is *much* better accomplished with PGP cleartext
signatures. This is already standard practice for the distribution of
much open source software, especially security software. The big
benefit is that the protection is much more end-to-end than anything
IPSec could provide. Consider the effect of mirror sites and web
caches, for example.
Phil
References: