Subject: iSCSI: security and authentication = none

From: "Eddy Quicksall" <[email-masked]>
Date: Fri, 15 Jun 2001 15:54:27 -0400

Section 4 says:

   Authentication and a Secure Channel setup MAY be performed
   independent of iSCSI (as when using tunneling IPSec or some
   implementations of transport IPSec) in which case the Login phase can
   be reduced to operational parameter negotiations.

Also, if an initiator sends the target HeaderDigest=none DataDigest=none
AuthMethod=none, then the target does not have to
SecurityContextComplete=Yes (because one of the examples says so).

So does that also mean, in this example, that other operational parameters
can be sent along with these 3 "none" parameters?

I know that section 4 may imply "yes" but since, in my example, the
initiator sends the keys maybe the answer is "no".

Eddy