> > [Regarding crypto code in the kernel for IPsec]
> > [Rustling noise, as of Nomex jumpsuit being donned]
> >
> > Okay, why is the network inside the kernel anyway?
>
> So that the kernel can implement some kind of security against bad frames
> being sent out and/or garbage. You can certainly make a case for some
> higher level protocols being in user space, and we do that for all the higher
> appletalk layers and for RPC. In theory if you are bored you can write SPX
> as a library on top of the IPX code too.
I guess I'm missing something. The drivers are still part of the kernel,
and the responsibility for producing only good frames lies there, no?
Mark H. Wood, Lead System Programmer MWOOD@INDYVAX.IUPUI.EDU
Those who will not learn from history are doomed to reimplement it.