[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Why can't ESP authenticate IP header?

To: "john ipsec" <ipsec123@hotmail.com>
Subject: Re: Why can't ESP authenticate IP header?
From: Francis Dupont <Francis.Dupont@enst-bretagne.fr>
Date: Sat, 22 Sep 2001 12:32:44 +0200
cc: sommerfeld@East.Sun.COM, ipsec@lists.tislabs.com
In-reply-to: Your message of Fri, 21 Sep 2001 20:20:42 EDT. <F1673efdKzaXBG3qlSI00002793@hotmail.com>
Sender: owner-ipsec@lists.tislabs.com

 In your previous mail you wrote:

   What confuses me is that ESP provides authentication similar to AH,
   but does it in a different way.
   
=> this is true for addresses but not for options/extension headers
(as IPv4 options have a very little use this is more an issue for IPv6).

Regards

Francis.Dupont@enst-bretagne.fr

PS: there is a historic point too: the first ESP version have no hash field.

References:

Re: Why can't ESP authenticate IP header?

From: "john ipsec" <ipsec123@hotmail.com>

Prev by Date: Re: Why can't ESP authenticate IP header?
Next by Date: Re: Why can't ESP authenticate IP header?
Prev by thread: Re: Why can't ESP authenticate IP header?
Next by thread: Re: Why can't ESP authenticate IP header?
Index(es):
- Main
- Thread