[Mip6-firewall] [Fwd: [saag] NIST profiles for IPv6 (including IPsec)]

[Hannes Tschofenig]

In case you haven't seen it. This document might be of interest for you.

Ciao
Hannes


-------- Original Message --------
Subject: 	[saag] NIST profiles for IPv6 (including IPsec)
Date: 	Tue, 27 Feb 2007 22:10:50 -0500
From: 	Thomas Narten <narten at us.ibm.com>
To: 	saag at mit.edu



Dunno if folk here have looked at these, but NIST has issued draft
profiles for IPv6 and IPsec:

	 http://www.antd.nist.gov/usgv6-v1-comments.html

These profiles are likely to have a siginificant impact on what
vendors do and what USG buys.

Have folk looked at the IPsec recommendations and do you think they
are reasonable? (Comments are due this Friday.)

One thing I note is that AH is optional rather than mandatory, with
ESP and NULL encryption used for authentication where needed. Is that
they way the market has gone at this point?

Thomas
_______________________________________________
saag mailing list
saag at mit.edu
http://mailman.mit.edu/mailman/listinfo/saag