Re: R41 in draft-ietf-v6ops-cpe-simple-security-07

[Rémi Denis-Courmont <remi@remlab.net>]

On Wed, 29 Jul 2009 11:21:11 +0200, Iljitsch van Beijnum

<iljitsch@muada.com> wrote:

> On 29 jul 2009, at 10:22, james woodyatt wrote:

> 

>> As long as the current treatment of IPsec AH, ESP and IKE remains in

>> the draft as is, I have no objection as an individual contributor to

>> removing recommendation R41.

> 

> I do. Using IPsec may be a viable solution for a vendor who controls

> both ends of the connection, but if I simply want to run a web server

> in my home or be able to ssh into my systems that's not a very good

> solution. A solution that allows applications to receive incoming

> sessions in some automated way is much better.



So do I. IPsec is viable for operating system vendors, but is entirely

useless for third party application vendors, for lack of any de-facto

standard API. Or then, we end up with everything over UDP *again*.



-- 

Rémi Denis-Courmont