Re: [dtn-security] Re(2): Header Encryption

"Ivancic, William D. (GRC-RHN0)" <william.d.ivancic@nasa.gov> Fri, 17 July 2009 19:24 UTC

Received: from ndjsnpf01.ndc.nasa.gov (ndjsnpf01.ndc.nasa.gov [198.117.1.121]) by maillists.intel-research.net (8.13.8/8.13.8) with ESMTP id n6HJOlP4021837 for <dtn-security@maillists.intel-research.net>; Fri, 17 Jul 2009 12:24:47 -0700
Received: from ndjsppt03.ndc.nasa.gov (ndjsppt03.ndc.nasa.gov [198.117.1.102]) by ndjsnpf01.ndc.nasa.gov (Postfix) with ESMTP id AF5F53282DA; Fri, 17 Jul 2009 14:22:57 -0500 (CDT)
Received: from ndjshub04.ndc.nasa.gov (ndjshub04.ndc.nasa.gov [198.117.4.163]) by ndjsppt03.ndc.nasa.gov (8.14.3/8.14.3) with ESMTP id n6HJMvAc011537; Fri, 17 Jul 2009 14:22:57 -0500
Received: from NDJSSCC03.ndc.nasa.gov ([198.117.4.170]) by ndjshub04.ndc.nasa.gov ([198.117.4.163]) with mapi; Fri, 17 Jul 2009 14:22:57 -0500
From: "Ivancic, William D. (GRC-RHN0)" <william.d.ivancic@nasa.gov>
To: Peter Lovell <plovell@mac.com>, Sushil Chaudhari <schaudhari@mzeal.com>, "dtn-security@maillists.intel-research.net" <dtn-security@maillists.intel-research.net>
Date: Fri, 17 Jul 2009 14:22:48 -0500
Thread-Topic: [dtn-security] Re(2): Header Encryption
Thread-Index: AcoHC1+krIKKVPpwTpik5rGtrhVbzwACFR0Q
Message-ID: <3A5AA67A8B120B48825BFFCF5443856137E5377269@NDJSSCC03.ndc.nasa.gov>
References: <20090717155125.7458.qmail@mzeal.com> <20090717162014.1496793716@smtp.mac.com>
In-Reply-To: <20090717162014.1496793716@smtp.mac.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=1.12.7400:2.4.4, 1.2.40, 4.0.166 definitions=2009-07-17_12:2009-07-03, 2009-07-17, 2009-07-17 signatures=0
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by maillists.intel-research.net id n6HJOlP4021837
Subject: Re: [dtn-security] Re(2): Header Encryption
X-BeenThere: dtn-security@maillists.intel-research.net
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: DTN Security Discussion <dtn-security.maillists.intel-research.net>
List-Unsubscribe: <http://maillists.intel-research.net/mailman/listinfo/dtn-security>, <mailto:dtn-security-request@maillists.intel-research.net?subject=unsubscribe>
List-Archive: <http://maillists.intel-research.net/pipermail/dtn-security>
List-Post: <mailto:dtn-security@maillists.intel-research.net>
List-Help: <mailto:dtn-security-request@maillists.intel-research.net?subject=help>
List-Subscribe: <http://maillists.intel-research.net/mailman/listinfo/dtn-security>, <mailto:dtn-security-request@maillists.intel-research.net?subject=subscribe>
X-List-Received-Date: Fri, 17 Jul 2009 19:24:48 -0000

>>2.Does DTN2 can be used with IPSEC? if not do we need additional
>>convergence layer for the support to IPSEC?
>
>I know of no particular reason it would be a problem but I must admit I
>haven't tried it. I'm sure others have and maybe they'll comment on
>successes or failure.
>
>Regards.....Peter
>
In the NASA internal multi-center testbed, the  IP network bubble at each center are connected via IPsec tunnels.  DTN over IP over IPsec tunnels is run all the time.  IPsec is independent of DTN layer security.


/Will