Subject: [IPsec] Apple to cripple VPN on demand in iphone due to VPN-via-DNS patent

From: Paul Wouters <[email-masked]>
Date: Fri, 5 Apr 2013 18:22:28 -0400 (EDT)

http://www.macrumors.com/2013/04/05/apple-to-alter-vpn-on-demand-behavior-in-ios-6-1-and-later-due-to-virnetx-lawsuit/

Apple documentation: http://support.apple.com/kb/TS4550

The patent: http://www.google.com/patents/US6502135

The patent is dated 1998, which I'm pretty sure is after the
FreeS/WAN and Opportunistic Encryption (and thus the IETF) work
had started, which clearly designed and implemented what is described below:

 	(1) generating from the client computer a Domain Name Service (DNS)
 	request that requests an IP address corresponding to a domain name
 	associated with the target computer;

 	(2) determining whether the DNS request transmitted in step (1) is
 	requesting access to a secure web site; and

 	(3) in response to determining that the DNS request in step (2) is
 	requesting access to a secure target web site, automatically initiating
 	the VPN between the client computer and the target computer.