[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

ike and secure DNS

To: Henry Spencer <henry@spsystems.net>
Subject: ike and secure DNS
From: Hugo Krawczyk <hugo@ee.technion.ac.il>
Date: Wed, 11 Oct 2000 09:57:11 +0200 (IST)
cc: ipsec <ipsec@lists.tislabs.com>
In-Reply-To: <Pine.BSI.3.91.1001009230347.5140C-100000@spsystems.net>
Sender: owner-ipsec@lists.tislabs.com

I'd like to gather information on existing projects (commerical or
academic) working towards the integration of DNSSEC infrastructure and
IKE/ipsec. I know FreeSWAN has such integration plans? Any progress in
that front? Other experiences?

Thanks,

Hugo

On Mon, 9 Oct 2000, Henry Spencer wrote:
> 
> > Then you could provision every peer with a central gateway's public key at
> > installation time, and use one-time passwords for authentication...
> 
> Actually you don't even need to provision the peers with the gateway's
> public key, if you trust DNS lookups -- you can get it from DNS.  

> 
>

Follow-Ups:

Re: ike and secure DNS

From: Bill Manning <bmanning@ISI.EDU>

Re: ike and secure DNS

From: Henry Spencer <henry@spsystems.net>

References:

Re: Reliable delete notifies

From: Henry Spencer <henry@spsystems.net>

Prev by Date: Re: Reliable delete notifies
Next by Date: Re: Reliable delete notifies
Prev by thread: Re: Reliable delete notifies
Next by thread: Re: ike and secure DNS
Index(es):
- Main
- Thread