[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Please kill preshared key.
On Thu, 6 Dec 2001, Bill Sommerfeld wrote:
> There's no need for it, it adds complexity. Kill it.
The FreeS/WAN project concurs, especially about the "one more way for
users to shoot themselves in the foot" part.
One thing... As I've been known to rant about :-), many of the people
arguing for its retention seem to confuse public keys with the horrors of
PKI. It would be a service to mankind if we referred to the feature under
discussion as "shared secret" or "preshared secret key", to distinguish it
from healthier approaches like preshared public keys.
Henry Spencer
henry@spsystems.net
References: