Messages in this thread | | | Date | Fri, 14 Jan 2000 03:55:29 -0500 | From | Richard Guy Briggs <> | Subject | Re: 2.4 and Strong Cryptography... |
| |
On Wed, Jan 12, 2000 at 11:29:14PM +0100, Marc Mutz wrote: > "Michael H. Warfield" wrote: > > > <snip> > > If these regs get finalized and are in the form we now expect them > > to be in, can we get the paperwork filled and get IPSEC (and other > > crypto goodies like ppdd) into the 2.4 kernel? KLIPS (from IPSEC) > > would be a wonderful win! That would put us up with OpenBSD with > > integrated IPSEC (OK, IKE, aka pluto, still needs improvement - > > but that's not a kernel issue). > > All those "crypto goodies" like CIPE, ppdd and IPSec (FreeS/WAN) are > a mixture of a (usually small) kernel module and a userspace daemon > (or setup tools). So you need to download the package anyway, > because userspace and kernel are so closely coupled. Look at ISDN, > look at pcmcia support and how long it took to include it into the > mainstream kernel. Still the most part of the users download the > external packages.
So what you are saying is that IPv4 should not be included because there are userspace tools that need to be downloaded to be able to use those features such as ifconfig(8), route(8), arp(8), ip(8), ipfwadm(8), ipportfw(8), ipautofw(8), ipchains(8), etc... Taking it to the sublime -- lets not include the kernel because you would need to download bash(1)! There may be other issues, but I don't think this one is particularly compelling.
> Marc
slainte mhath, RGB -- Richard Guy Briggs -- PGP key available Auto-Free Ottawa! Canada <www.conscoop.ottawa.on.ca/rgb/> <www.flora.org/afo/> Prevent Internet Wiretapping! -- FreeS/WAN:<www.freeswan.org> Thanks for voting Green! -- <green.ca> Marillion:<www.marillion.co.uk> [unhandled content-type:application/pgp-signature] | |