IPsecurity theater

[coderman <coderman () gmail com>]

Check Point, Cisco, Juniper, * now know that one open port is too
many.  ISAKMP is a 0day slut.

details on fully out of band key management desired; a virtual private
network SHOULD not process / accept any packet that is not authentic
and private.

in ipsec esp/transport//require ah/transport//require;

---

why do all key daemons suck?
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/