[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

AH is pretty useless and perhaps should be deprecated

Subject: AH is pretty useless and perhaps should be deprecated
From: joelja at bogus.com (Joel Jaeggli)
Date: Mon, 16 Nov 2009 15:17:29 +0900
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]> <[email protected]>


Bill Fehring wrote:
> On Sun, Nov 15, 2009 at 20:48, Joel Jaeggli <joelja at bogus.com> wrote:
>> Owen DeLong wrote:
>>> I've never seen anyone use AH vs. ESP.
>> OSPFv3?
> 
> Maybe I'm asking a dumb question, but why would one prefer AH over ESP
> for OSPFv3?

Header protection... still doesn't provide replay protection, your
mileage may vary

http://tools.ietf.org/html/draft-ietf-opsec-routing-protocols-crypto-issues-02

> RFC4552:
> "In order to provide authentication to OSPFv3, implementations MUST
> support ESP and MAY support AH."
> 
> -Bill
>

Follow-Ups:
- AH is pretty useless and perhaps should be deprecated
  - From: kohn.jack at gmail.com (Jack Kohn)

References:
- AH is pretty useless and perhaps should be deprecated
  - From: kohn.jack at gmail.com (Jack Kohn)
- AH is pretty useless and perhaps should be deprecated
  - From: owen at delong.com (Owen DeLong)
- AH is pretty useless and perhaps should be deprecated
  - From: joelja at bogus.com (Joel Jaeggli)
- AH is pretty useless and perhaps should be deprecated
  - From: lists at billfehring.com (Bill Fehring)

Prev by Date: AH is pretty useless and perhaps should be deprecated
Next by Date: Alternatives to Cisco SFP-GE-S?
Previous by thread: AH is pretty useless and perhaps should be deprecated
Next by thread: AH is pretty useless and perhaps should be deprecated
Index(es):
- Date
- Thread