Re: is manual keying mandatory (fwd)

[Jackie Wilson <[e-mail]>]

I agree.  It will be some time before all boxes support ISAKMP, but
they will need to be included in secure networks.  This will help
customers adopt ISAKMP as a standard if it is widely available.

In a few years it could probably be phased out.

Jackie



Bill Sommerfeld wrote:
> From [e-mail]  Wed Mar 18 18:11:53 1998
> Message-Id: <[e-mail]>
> To: "IPSEC Mailing List (E-mail)" <[e-mail]>
> Subject: Re: is manual keying mandatory 
> In-reply-to: Your message of "Wed, 18 Mar 1998 13:51:35 -0800 ."
>              <[e-mail]> 
> Date: Wed, 18 Mar 1998 18:44:22 -0500
> From: Bill Sommerfeld <[e-mail]>
> Sender: [e-mail]
> Precedence: bulk
> 
> I feel strongly that manual keying should continue to be a MUST.
> 
> There are going to be some times when the full complexity of ISAKMP
> won't be necessary; having manual keying universally available will
> improve interoperability and configurability in those situations...
> 
> It also leaves makes more room for experimentation with new key
> management techniques, since a new key management system can be
> grafted on through the "manual" key management interface.
> 
> It's also useful in testing to ensure that the transforms, etc., are
> in a position to really reject things like weak keys.
> 
> All in all, it makes for a more open, modular system.
> 
> 						- Bill
> 


-- 
Jacqueline Wilson          | Phn:  [phone]
IBM, AIX/6000              | Fax:  [phone]
11400 Burnet Road ZIP 9551 | Ext:  8-2702   Tie-Line:  678
Austin, TX 78758-3493      | inet: [e-mail]