[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Question on Section 3.8 of draft-ietf-ipsec-udp-encaps-00.txt

To: "Wang, Cliff" <CWang@smartpipes.com>
Subject: Re: Question on Section 3.8 of draft-ietf-ipsec-udp-encaps-00.txt
From: Ari Huttunen <Ari.Huttunen@F-Secure.com>
Date: Wed, 04 Jul 2001 16:23:24 +0300
CC: "'wdixon@microsoft.com'" <wdixon@microsoft.com>, "'kivinen@ssh.fi'" <kivinen@ssh.fi>, ipsec@lists.tislabs.com
Organization: F-Secure Corporation
References: <4652644B98DFF34696801F8F3070D3FE1E18D0@D2CSPEXM001.smartpipes.com>
Sender: owner-ipsec@lists.tislabs.com


"Wang, Cliff" wrote:
> 
> In the the picture of Section 3.8, the UDP hdr is protected by the AH
> authentication.
> It seems wrong to me since the UDP header is added after the AH is
> calculated.
> Please clarify.

Yes, it's a typo. The UDP header is not to be authenticated.

Ari

-- 
Ari Huttunen                   phone: +358 9 2520 0700
Software Architect             fax  : +358 9 2520 5001

F-Secure Corporation       http://www.F-Secure.com 

F(ully)-Secure products: Integrated Solutions for Enterprise Security

References:

Question on Section 3.8 of draft-ietf-ipsec-udp-encaps-00.txt

From: "Wang, Cliff" <CWang@smartpipes.com>

Prev by Date: Re: IPSEC LINUX SERVER
Next by Date: IPSEC: Freeswan/Securemote
Prev by thread: Question on Section 3.8 of draft-ietf-ipsec-udp-encaps-00.txt
Next by thread: IPSEC LINUX SERVER
Index(es):
- Main
- Thread