[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Death to AH (was Re: SA identification)

To: Bill Sommerfeld <sommerfeld@East.Sun.COM>
Subject: Re: Death to AH (was Re: SA identification)
From: Jason R Thorpe <thorpej@zembu.com>
Date: Fri, 23 Mar 2001 16:06:01 -0600
Cc: Sandy Harris <sandy@storm.ca>, IP Security List <ipsec@lists.tislabs.com>
In-Reply-To: <200103232043.f2NKhP902885@thunk.east.sun.com>; from sommerfeld@East.Sun.COM on Fri, Mar 23, 2001 at 03:43:25PM -0500
Mail-Followup-To: Jason R Thorpe <thorpej@zembu.com>,Bill Sommerfeld <sommerfeld@East.Sun.COM>,Sandy Harris <sandy@storm.ca>,IP Security List <ipsec@lists.tislabs.com>
Organization: Zembu Labs, Inc.
References: <3ABBB2C4.BE527C4A@storm.ca> <200103232043.f2NKhP902885@thunk.east.sun.com>
Reply-To: thorpej@zembu.com
Sender: owner-ipsec@lists.tislabs.com
User-Agent: Mutt/1.2.5i

On Fri, Mar 23, 2001 at 03:43:25PM -0500, Bill Sommerfeld wrote:

 > > I'd say several of their recommendations were absolute no-brainers:
 > > 
 > > 1) eliminate transport mode
 > 
 > I *strongly* disagree, unless you meant "eliminate the
 > transport/tunnel distinction".

Indeed.  My personal inclination would be to nuke the idea of "tunnel"
mode -- if you want tunnels, build them using proto 4 or proto 41, and
secure that trafic with transport mode ESP.

-- 
        -- Jason R. Thorpe <thorpej@zembu.com>

Follow-Ups:

Re: Death to AH (was Re: SA identification)

From: Francis Dupont <Francis.Dupont@enst-bretagne.fr>

References:

Re: Death to AH (was Re: SA identification)

From: Sandy Harris <sandy@storm.ca>

Re: Death to AH (was Re: SA identification)

From: Bill Sommerfeld <sommerfeld@East.Sun.COM>

Prev by Date: Re: Death to AH (was Re: SA identification)
Next by Date: Re: Death to AH (was Re: SA identification)
Prev by thread: Re: Death to AH (was Re: SA identification)
Next by thread: Re: Death to AH (was Re: SA identification)
Index(es):
- Main
- Thread