Re: Discussion of an app-layer API for IPsec

• From: Alexey Melnikov <mel@messagingdirect.com>
• Date: Mon, 14 May 2001 02:30:49 -0600
• To: Paul Hoffman / IMC <phoffman@imc.org>, Keith Moore <moore@cs.utk.edu>
• CC: discuss@apps.ietf.org
• Message-ID: <3AFF97B9.D1C1FFA5@messagingdirect.com>

Keith Moore wrote:

> I basically think that IPsec is nearly useless without an application-layer
> API, but the API needs to not only make applications aware of whether
> a security association has been established (along with the credentials
> so that the application can evaluate them for itself) but also allow
> the application to control the credentials that are used when establishing
> SAs.

And one possible use of this is API is for EXTERNAL SASL mechanism, implemented
on top of IPSec.

Alexey

Received on Monday, 14 May 2001 04:34:38 UTC