[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IKE Public Key Encryption
Hello Henry,
First of all, thanks for brining me back on-line - your right, not all
public keys are based on certificates.
HS> Only if there is a well-defined convention for what it means in the case
HS> where no certificates are involved, or if the mandatory-ness is only in
HS> the certificate case. One major reason for making things optional is so
HS> they can be omitted when they do not make sense.
I think making it mandatory for certs and not other methods would be
odd and overly complicated. I'm beginning to see a pattern:
Should the public key (cert or key its self, preferably), that is used
for the encryption by the initiator, be hashed and included in the third
message?
This would allow the responder to know exactly which was used by the
initiator, protect the identity, and pose no threat to security.
Whatta ya think?
-jim
Follow-Ups:
References: