W3C home > Mailing lists > Public > ietf-discuss@w3.org > May 2001

Re: Discussion of an app-layer API for IPsec

From: Alexey Melnikov <mel@messagingdirect.com>
Date: Mon, 14 May 2001 02:30:49 -0600
Message-ID: <3AFF97B9.D1C1FFA5@messagingdirect.com>
To: Paul Hoffman / IMC <phoffman@imc.org>, Keith Moore <moore@cs.utk.edu>
CC: discuss@apps.ietf.org 
Keith Moore wrote:

> I basically think that IPsec is nearly useless without an application-layer
> API, but the API needs to not only make applications aware of whether
> a security association has been established (along with the credentials
> so that the application can evaluate them for itself) but also allow
> the application to control the credentials that are used when establishing
> SAs.

And one possible use of this is API is for EXTERNAL SASL mechanism, implemented
on top of IPSec.

Alexey
Received on Monday, 14 May 2001 04:34:38 UTC

This archive was generated by hypermail 2.4.0 : Saturday, 6 May 2023 21:22:21 UTC