Re: IPv6 evaluating according to draft-ietf-ipngwg-icmp-v3-00.eval

[Jeff Garzik <jgarzik@xxxxxxxxxxxxxxxx>]

Aki M Laukkanen wrote:
> 5.1 Authentication and Encryption of ICMP messages
> 
>    ICMP protocol packet exchanges can be authenticated using the IP
>    Authentication Header [IPv6-AUTH].  A node SHOULD include an
>    Authentication Header when sending ICMP messages if a security
>    association for use with the IP Authentication Header exists for the
>    destination address.  The security associations may have been created
>    through manual configuration or through the operation of some key
>    management protocol.

I wonder how long until we see IPsec in the kernel...  hpa already got
permission to put crypto source and binaries (derived from open source
crypto) on kernel.org.

        Jeff


-- 
Jeff Garzik             |
Building 1024           | Would you like a Twinkie?
MandrakeSoft            |