[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Please save the pre-shared key mode

To: Alex Alten <Alten@netvista.net>
Subject: Re: Please save the pre-shared key mode
From: Michael Thomas <mat@cisco.com>
Date: Thu, 6 Dec 2001 09:42:36 -0800 (PST)
Cc: "Wang, Cliff" <CWang@smartpipes.com>, ipsec@lists.tislabs.com
In-Reply-To: <3.0.3.32.20011205192048.00bb2168@pop3.netvista.net>
References: <4652644B98DFF34696801F8F3070D3FE011884A2@D2CSPEXM001.smartpipes.com><3.0.3.32.20011205192048.00bb2168@pop3.netvista.net>
Sender: owner-ipsec@lists.tislabs.com

Alex Alten writes:
 > 
 > I *strongly* 2nd this motion.  It would be extremely foolish
 > to eliminate PSK support.  Foolish in this case translates into
 > lots of extra expensive hardware, etc., for our poor customers.

   There are already two choices for keying IPsec SA's
   with pre-shared keys with IETF protocols:

   1) IKEv1
   2) KINK

   The latter can be used peer-peer as well, and
   fixes many of the problems with (1). Why then
   do we need to have yet another? 

	 Mike

References:

Please save the pre-shared key mode

From: "Wang, Cliff" <CWang@smartpipes.com>

Re: Please save the pre-shared key mode

From: Alex Alten <Alten@netvista.net>

Prev by Date: RE: Please save the pre-shared key mode
Next by Date: Re: IKEv2 & DoS protection
Prev by thread: Re: Please save the pre-shared key mode
Next by thread: Re: Please save the pre-shared key mode
Index(es):
- Main
- Thread