Re: [Ipsec] Layer 2 processing inside IPsec

[Bill Sommerfeld <sommerfeld@east.sun.com>]

one additional point: the header compression schemes i'm familiar with
all involve inter-packet dependancies.  

If someone is particularly serious about integrating IPsec and ROHC,
another thing worth looking at is whether an the integrity protection
provided by an esp-rohc combination might well be significantly
enhanced by doing a MAC over the pre-compressed packet rather than/in
addition to the current MAC over the ciphertext...

(yes, this is a fairly significant change to ESP...)

					- Bill




_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec