[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

AH is pretty useless and perhaps should be deprecated

Subject: AH is pretty useless and perhaps should be deprecated
From: thegameiam at yahoo.com (David Barak)
Date: Sat, 14 Nov 2009 17:28:20 -0800 (PST)
In-reply-to: <[email protected]>
References: <[email protected]> <000a01ca6563$1db96f20$592c4d60$@edu> <[email protected]>

I've seen AH used as a "prove that this hasn't been through a NAT" mechanism.??In this context, it's pretty much perfect.

However, what I don't understand is where the dislike for it?originates: if you don't like it, don't run it.??It is useful in certain cases,?and it's already in all of the production IPSec implementations.? Why the hate?
David Barak
Need Geek Rock? Try The Franchise: 
http://www.listentothefranchise.com

Follow-Ups:
- AH is pretty useless and perhaps should be deprecated
  - From: smb at cs.columbia.edu (Steven Bellovin)

References:
- AH is pretty useless and perhaps should be deprecated
  - From: kohn.jack at gmail.com (Jack Kohn)
- AH is pretty useless and perhaps should be deprecated
  - From: stasinia at msoe.edu (Adam Stasiniewicz)
- AH is pretty useless and perhaps should be deprecated
  - From: smb at cs.columbia.edu (Steven Bellovin)

Prev by Date: AH is pretty useless and perhaps should be deprecated
Next by Date: AH is pretty useless and perhaps should be deprecated
Previous by thread: AH is pretty useless and perhaps should be deprecated
Next by thread: AH is pretty useless and perhaps should be deprecated
Index(es):
- Date
- Thread