Re: [dhcwg] IPsec for DHCPv6 client ?

> Why is not proposed using IPsec to secure communications between 
> clients and servers with the some restrictions, i.e. installation of 
> static keys as shared secret, in intra-domain ?

Because in general we don't expect that such a security association 
would exist.   In general, you are plugging a device into the network, 
and you want it to work - you don't want to have to configure it before 
you plug it in.   If you wanted that, you wouldn't be using DHCP, 
right?   The only plausible exception I can come up with is a cell 
phone, where perhaps the provider would install an IPsec key in the 
phone.   But even then, I'm skeptical that it could be made to work the 
way you describe.

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg