[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Death to AH (was Re: SA identification)
Bill Sommerfeld wrote:
>
> > I'd say several of their recommendations were absolute no-brainers:
> >
> > 1) eliminate transport mode
>
> I *strongly* disagree, unless you meant "eliminate the
> transport/tunnel distinction".
The suggestion is Schneier and Ferguson's, and they said transport mode.
Methinks you can implement either mode in terms of the other, either doing tunnels
over transport connections or treating transport mode as a tunnel with single
machines as endpoints.
Follow-Ups:
References: