[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Why can't ESP authenticate IP header?

To: <ipsec@lists.tislabs.com>
Subject: Why can't ESP authenticate IP header?
From: "lokesh" <lokeshnb@intotoinc.com>
Date: Fri, 21 Sep 2001 14:58:57 +0530
Reply-To: "lokesh" <lokeshnb@intotoinc.com>
Sender: owner-ipsec@lists.tislabs.com

Hello all,

Can anyone help me to find an answers to following questions

1. One of the reasons cited in support of AH is that

it is needed for mobile IP users since, their ip addresses

change and need Authentication for the source IP address

that can be done by AH. Here I want to know, why can't

we make ESP authenticate IP header also? are there any

other issues involved in this?

2. Apart from mobile ip user reason, is there any other

requirement that needs AH ?

-Lokesh

Follow-Ups:

Re: Why can't ESP authenticate IP header?

From: Derek Fawcus <dfawcus@cisco.com>

Prev by Date: an ambiguity of draft-shacham-ippcp-rfc2393bis-07
Next by Date: Re: How many spd recrds ?
Prev by thread: Re: an ambiguity of draft-shacham-ippcp-rfc2393bis-07
Next by thread: Re: Why can't ESP authenticate IP header?
Index(es):
- Main
- Thread