[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Death to AH (was Re: SA identification)
In your previous mail you wrote:
Francis Dupont <Francis.Dupont@enst-bretagne.fr> writes:
> => I have a different concern: it will be very bad to have IPsec
> and mobile IPv6 new built-in security fighting together.
> In general I think IPsec must be far more mobility aware....
Nothing says you can't have multiple security systems. Indeed,
I would expect there to be multiple systems in use, even for the
same connection. I have no problems running e.g. SSL/TLS over IPSec.
=> this is a different concern: multiple systems are bad a priori
because bug likelihood increases with complexity but the same argument
applies to systems which try to do too much...
Just because MobileIP has its own security for the BU doesn't mean
that IPSec cannot be used. And just because IPSec is is use does not
necessarily mean that it's the right solution for MobileIP BUs.
=> this is *not* what I wrote!
Regards
Francis.Dupont@enst-bretagne.fr
References: