[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Isis-wg] Re: Deprecation of AH header from the IPSEC tool kit
Ran, another basic question...
What's the threat solved by authenticating the source route header
at intermediate points? What would be the problem if a packet
showed up at the destination, not having traversed the route
you wanted? I'm assuming you're not trying to solve the confidentiality
problem by making sure that the packet stays in "friendly" parts of the
net, and therefore doesn't need encryption, but if it took a different
route it would need encryption.
Radia
Follow-Ups: