[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Wired query on Windows 2000 and DES/3DES

To: Declan McCullagh <declan@wired.com>
Subject: Re: Wired query on Windows 2000 and DES/3DES
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
Date: Wed, 17 May 2000 14:02:52 -0400
CC: ipsec@lists.tislabs.com
In-reply-to: Your message of "Mon, 15 May 2000 19:46:14 EDT." <4.3.0.20000515194606.01f67f00@pop.webcom.com>
Sender: owner-ipsec@lists.tislabs.com


>>>>> "Declan" == Declan McCullagh <declan@wired.com> writes:
    Declan> * They say it's for remote ease-of-maintenance: "if i misconfigured a 
    Declan> system, rather than having to travel out to that machine to fix

  If the policy statements were signed authorization certificates, then this
would be irrelevant. The only reason that this is necessary for maintenance
is presumeably because certificate based authorizations are not yet
integrated into Why2K. Management functions do not need privacy (although
that is certainly desirable), they need authentication.
  Turning 3DES on or off should be done explicitely via sign policy certificates. 

   :!mcr!:            |  Solidum Systems Corporation, http://www.solidum.com
   Michael Richardson |The Internet Packet Processing Company. Hanging in SFO
 Personal: <A HREF="http://www.sandelman.ottawa.on.ca/People/Michael_Richardson/Bio.html">mcr@sandelman.ottawa.on.ca</A>. PGP key available.
 Corporate: <A HREF="mailto:mcr@solidum.com">mcr@solidum.com</A>.

References:

Re: Wired query on Windows 2000 and DES/3DES

From: Declan McCullagh <declan@wired.com>

Prev by Date: Re: Windows 2000 and Cicsco router interoperability
Next by Date: RE: Windows 2000 and Cicsco router interoperability
Prev by thread: Re: Wired query on Windows 2000 and DES/3DES
Next by thread: Re: Wired query on Windows 2000 and DES/3DES
Index(es):
- Main
- Thread