[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: But are we talking IPv6 only? That's how I read the draft. (Re: Some suggestions for draft-ietf-v6ops-cpe-simple-security-03)

Hi James,

On Wed, 27 Aug 2008 15:20:37 -0700
james woodyatt <jhw@apple.com> wrote:

> On Aug 27, 2008, at 14:42, Mark Smith wrote:
> > Only permitting inbound authenticated tunneling protocols like  
> > IPsec, l2tp or pptp would easily defeat that.
> 
> IPsec is not necessarily authenticated.
> 

I had thought of that. Couldn't the statefulness/negotiated identity of
unauthenticated IPsec (and other stateful tunnelling protocols) at
least be the minimum threshold of what is allowed blindly?

Regards,
Mark.