Re: [Ipsec] new internet draftt - draft-touch-anonsec

[Michael Richardson <mcr@sandelman.ottawa.on.ca>]

>>>>> "Bora" == Bora Akyol <bora@cisco.com> writes:
    Bora> Finally, as is widely discussed, IKEv1 is not the most robust protocol
    Bora> as far as responsiveness to DOS attacks. By requiring these nodes to do
    Bora> IKE, I think we would opening ourselves up for more problems.

  IKE in aggressive mode has that property.
  That's why smart people don't use that.

--
]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr@xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
  

_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec