I basically think that IPsec is nearly useless without an application-layer API, but the API needs to not only make applications aware of whether a security association has been established (along with the credentials so that the application can evaluate them for itself) but also allow the application to control the credentials that are used when establishing SAs. KeithReceived on Sunday, 6 May 2001 18:02:14 GMT
This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 23 March 2006 20:11:28 GMT