[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SCTP and IPsec issues

To: Michael Richardson <mcr@sandelman.ottawa.on.ca>
Subject: Re: SCTP and IPsec issues
From: "Angelos D. Keromytis" <angelos@keromytis.org>
Date: Thu, 29 Mar 2001 21:25:31 -0500
Cc: ipsec@lists.tislabs.com
In-reply-to: Your message of "Wed, 28 Mar 2001 18:06:05 EST." <200103282306.f2SN65k02407@marajade.sandelman.ottawa.on.ca>
Sender: owner-ipsec@lists.tislabs.com


In message <200103282306.f2SN65k02407@marajade.sandelman.ottawa.on.ca>, Michael
  Richardson writes:
 >
 > >>>>> "Angelos" == Angelos D Keromytis <angelos@keromytis.org> writes:
 >     Angelos> but that can be done by a series of Phase 2 exchanges just as
 >     Angelos> easily. In any situation that involves automatic keying (e.g.,
 >     Angelos> "telnet -secure foo.com"), I don't see how this would buy you
 >     Angelos> anything, other than increased complexity.
 >
 >   "ftp -secure foo.com"

That won't do you any good, since in neither passive or active FTP do you know
the server side's port until after you've started an exchange.
-Angelos

References:

Re: SCTP and IPsec issues

From: Michael Richardson <mcr@sandelman.ottawa.on.ca>

Prev by Date: help
Next by Date: Re: Protocols that refer AH (was: Death to AH)
Prev by thread: Re: SCTP and IPsec issues
Next by thread: Re: SCTP and IPsec issues
Index(es):
- Main
- Thread