Re: CONSENSUS TEST: Fragmentation handling

[Bill Sommerfeld <sommerfeld@east.sun.com>]

> => anything which tries to look at inside my packets violates my
> confidentiality, and I don't like this at all from something which
> is supposed to protect it. IMHO a router should not look at something
> which is not in the IP header, or do you argue we should only use
> IPsec end-to-end? (I am not against the idea but this is a bit drastic).

We're talking about behavior in an IPsec implementation which enforces
policy based on port numbers.  On the cleartext side, it's *already*
looking into the packet well past the ip header..

						- Bill