[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Deprecation of AH header from the IPSEC tool kit
> Assume that Steve Bellovin has ocnvinced everyone that all current IPv6
>extension headers to not benefit from AH, or carry information that could
>be independantly verified from info stored in the SA-table. (e.g. legitimate
>source addresses, pointers to PCBs). i.e. there is no current reason to
>have AH vs ESP in IPv6.
the observation is incorrect. there are extension headers that
require protection from AH: mobile-ip6 headers like binding update.
itojun
Follow-Ups:
References: