Re: [Design] [PATCH] USAGI IPsec

Zach Brown (zab@zabbo.net)
Fri, 18 Oct 2002 21:40:31 -0400


> It's fine for testing purposes, leave it in.

absolutely. it could also be needed for interoperability, or many other
valid uses that might not depend on its sheer strength as a cipher.

"but you shouldn't be interoperating with things that are insecure!"

blah blah blah. that is not the kernel's decision to make. meaningful
security is defined by much more than context-free assertions. warn
against its naive use, avoid it being a default, but allow the clued to
use it easily when it makes sense.

- z
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/