Re: 2.4 and Strong Cryptography...

From: Richard Guy Briggs (rgb@conscoop.ottawa.on.ca)
Date: Fri Jan 14 2000 - 03:55:29 EST


On Wed, Jan 12, 2000 at 11:29:14PM +0100, Marc Mutz wrote:
> "Michael H. Warfield" wrote:
> >
> <snip>
> > If these regs get finalized and are in the form we now expect them
> > to be in, can we get the paperwork filled and get IPSEC (and other
> > crypto goodies like ppdd) into the 2.4 kernel? KLIPS (from IPSEC)
> > would be a wonderful win! That would put us up with OpenBSD with
> > integrated IPSEC (OK, IKE, aka pluto, still needs improvement -
> > but that's not a kernel issue).
>
> All those "crypto goodies" like CIPE, ppdd and IPSec (FreeS/WAN) are
> a mixture of a (usually small) kernel module and a userspace daemon
> (or setup tools). So you need to download the package anyway,
> because userspace and kernel are so closely coupled. Look at ISDN,
> look at pcmcia support and how long it took to include it into the
> mainstream kernel. Still the most part of the users download the
> external packages.

So what you are saying is that IPv4 should not be included because
there are userspace tools that need to be downloaded to be able to use
those features such as ifconfig(8), route(8), arp(8), ip(8),
ipfwadm(8), ipportfw(8), ipautofw(8), ipchains(8), etc... Taking it
to the sublime -- lets not include the kernel because you would need
to download bash(1)! There may be other issues, but I don't think
this one is particularly compelling.

> Marc

        slainte mhath, RGB

-- 
Richard Guy Briggs -- PGP key available            Auto-Free Ottawa! Canada
<www.conscoop.ottawa.on.ca/rgb/>                       <www.flora.org/afo/>
Prevent Internet Wiretapping!        --        FreeS/WAN:<www.freeswan.org>
Thanks for voting Green! -- <green.ca>      Marillion:<www.marillion.co.uk>


- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Jan 15 2000 - 21:00:26 EST