Subject: [anonsec] opportunistic IPsec interoperability

From: Atul.Sharma at nokia.com ([email-masked])
Date: Thu Sep 9 11:31:18 2004

I think identity based encryption sounds fine. Using the public
part (here identity) to encrypt is not an entirely new concept.

The question is who is going to vouch for those identities? How
do you prevent spurious identites being advertised? Do we need 
to come back to certificates, one of the main reasons to use 
identity instead of public keys?

Besides, IMHO, the goals of ANONSEC may be different from the 
goals of IBE.

Atul

> -----Original Message-----
> From: [email-masked] [mailto:[email-masked]]On
> Behalf Of ext Eugen Leitl
> Sent: Thursday, September 09, 2004 4:52 AM
> To: [email-masked]
> Subject: [anonsec] opportunistic IPsec interoperability
> 
> 
> 
> There have been several opportunistic IPsec schemes 
> (FreeS/WAN, etc.) but
> none of them was widely deployed nor achieved true 
> opportunism (publishing
> DNS records is a high threshold), and suffered high setup latency.
> 
> What's your opinion on http://rooster.stanford.edu/~ben/pubs/ipibe.pdf
> ?
> 
> -- 
> Eugen* Leitl <a href="http://leitl.org">leitl</a>
> ______________________________________________________________
> ICBM: 48.07078, 11.61144            http://www.leitl.org
> 8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE
> http://moleculardevices.org         http://nanomachines.net
>