> Simon J. Gerraty wrote:
>
> | > 3. The reason I say bad for wide are mounts is IP_SPOOFING
> |
> | Crypto is the best bet for this. The next release of unfs (actually
> | I'll be changing the name to snfs as unfs is the name of a Linux
> | project) will be able to use SSL as its transport.
>
> Is SSL appropriate for this? If you go to TCP only, it might
> be ok (what about key changes?), but I would see using the IPSec
> algorithims as a better move possibly involving a lot less public key
> activity.
Yes SSL is appropriate - I was talking TCP only anyway.
Also you will be able to run it on any platform imediately.
I haven't been following IPv6 closely for some time, but I'd guess
that it (and esp. IPsec) are years away from general availability.
--sjg
References:
|
|
