Re: HIP and PKI reqs [RE: Identifier/locator recap]

[Michael Richardson <mcr@sandelman.ottawa.on.ca>]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Pekka" == Pekka Savola <pekkas@netcore.fi> writes:
    Pekka> However, my complaint with HIP model is that it seems so closely
    Pekka> tied to 
    Pekka> ESP and security.  

  Why is this a problem for you?

  I think that we very much need better security. This is end-to-end
security. P4s don't even notice doing 3DES (let alone AES), and TPCA may
put hardware accelerators on every motherboard.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Finger me for keys

iQCVAwUBPnZpP4qHRg3pndX9AQEeDgQAz1PLCjM3Mduevr//hMHtbWQrWzF1pudo
JZa3hp44vMJFvbaOZyJsRGJ3dBYwam03EqP0MrPd1tZl4E4DJOCwwkAc99dRA5DO
r9KAz9LA8rDit5BDHayaJd3C/DKskhSQR1C7ezT2Yztw+nHZ8p3UqvaSy4IbdR/T
E8qQYZePkc4=
=eJY4
-----END PGP SIGNATURE-----