[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IPSEC Security Gateways & NAT
> Is anyone still interested in Base Mode? It would be possible to create
> a Base Mode where reception of the first message is stateless to the Responder,
> by sending the state back in msg2 encrypted with some locally known symmetric
> key, and verified upon reception in msg3. This modified Base Mode
> could then be used to replace Aggressive Mode. The rationale for changing
> Base Mode would be that nobody's yet really using it (?), and that it's cool :).
> There's a paper by Pekka Nikander explaining the theory of making protocols
> stateless, forget where that is though.
I'd be very interested in seeing a mode which is initially stateless
for the responder; it's a key bit of technology from photuris which
was never carried forward to IKE.
- Bill
References: