Subject: [midcom] IPSEC ESP UDP encapsulation

From: "Cedric Aoun"<[email-masked]>
Date: Tue, 7 May 2002 11:17:55 +0100

While catching on my emails, I haven't noticed on the security threads usage
of 
IPSEC ESP UDP encapsulation.
We might want to leave it flexible enough to multimedia hosts securing their
multimedia
applications with IPSEC ESP, to reuse their IPSEC ESP stack to secure the
STUN protocol.
I've been monitoring the IPSEC ESP UDP encapsulation in the IPSEC WG and it
seems to be going to WGLC.
In case we think this option is viable, we'll need 3 options to be
negotiated:
-No STUN security, in which IPSEC ESP UDP encapsulation could be used (or we
could imagine people not doing anything 
about it if they feel that the security threats are N/A)
-Use shared secrets
-Use TLS to get the shared secret

We could use as default the shared secret method.

Any comments?
Thanks
Cedric

_______________________________________________
midcom mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/midcom