lkml.org 
[lkml]   [2000]   [Jan]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: 2.4 and Strong Cryptography...
On Wed, Jan 12, 2000 at 11:29:14PM +0100, Marc Mutz wrote:
> "Michael H. Warfield" wrote:
> >
> <snip>
> > If these regs get finalized and are in the form we now expect them
> > to be in, can we get the paperwork filled and get IPSEC (and other
> > crypto goodies like ppdd) into the 2.4 kernel? KLIPS (from IPSEC)
> > would be a wonderful win! That would put us up with OpenBSD with
> > integrated IPSEC (OK, IKE, aka pluto, still needs improvement -
> > but that's not a kernel issue).
>
> All those "crypto goodies" like CIPE, ppdd and IPSec (FreeS/WAN) are
> a mixture of a (usually small) kernel module and a userspace daemon
> (or setup tools). So you need to download the package anyway,
> because userspace and kernel are so closely coupled. Look at ISDN,
> look at pcmcia support and how long it took to include it into the
> mainstream kernel. Still the most part of the users download the
> external packages.

So what you are saying is that IPv4 should not be included because
there are userspace tools that need to be downloaded to be able to use
those features such as ifconfig(8), route(8), arp(8), ip(8),
ipfwadm(8), ipportfw(8), ipautofw(8), ipchains(8), etc... Taking it
to the sublime -- lets not include the kernel because you would need
to download bash(1)! There may be other issues, but I don't think
this one is particularly compelling.

> Marc

slainte mhath, RGB
--
Richard Guy Briggs -- PGP key available Auto-Free Ottawa! Canada
<www.conscoop.ottawa.on.ca/rgb/> <www.flora.org/afo/>
Prevent Internet Wiretapping! -- FreeS/WAN:<www.freeswan.org>
Thanks for voting Green! -- <green.ca> Marillion:<www.marillion.co.uk>
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2005-03-22 13:55    [W:0.084 / U:0.228 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site