Re: [Design] [PATCH] USAGI IPsec

From: Zach Brown (zab@zabbo.net)
Date: Fri Oct 18 2002 - 20:40:31 EST


> It's fine for testing purposes, leave it in.

absolutely. it could also be needed for interoperability, or many other
valid uses that might not depend on its sheer strength as a cipher.

"but you shouldn't be interoperating with things that are insecure!"

blah blah blah. that is not the kernel's decision to make. meaningful
security is defined by much more than context-free assertions. warn
against its naive use, avoid it being a default, but allow the clued to
use it easily when it makes sense.

- z
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Wed Oct 23 2002 - 22:00:45 EST