[IPsec] Re: IPsec as an address family

2025-01-14 Thread Paul Wouters
On Jan 14, 2025, at 14:43, Soni "It/Its" L. wrote: > > we really wanna be able to use ipsec in end-user applications... If you look at my Opportunistic IPsec presentations (pdf and videos available), you will an ondemand system triggered by DNS lookups in the resolver. Thus an application look

[IPsec] Re: IPsec as an address family

2025-01-14 Thread Paul Wouters
> On Jan 14, 2025, at 15:43, Soni "It/Its" L. wrote: > >  > >> On 2025-01-14 16:53, Paul Wouters wrote: >> On Jan 14, 2025, at 14:43, Soni "It/Its" L. wrote: >> > > we really wanna be able to use ipsec in end-user applications... >> >> If you look at my Opportunistic IPsec presentations (pd

[IPsec] Re: IPsec as an address family

2025-01-14 Thread Soni "It/Its" L.
On 2025-01-14 18:01, Paul Wouters wrote: > On Jan 14, 2025, at 15:43, Soni "It/Its" L. wrote: > >  > >> On 2025-01-14 16:53, Paul Wouters wrote: >> On Jan 14, 2025, at 14:43, Soni "It/Its" L. wrote: >> > > we really wanna be able to use ipsec in end-user applications... >> >> If you loo

[IPsec] IPsec as an address family

2025-01-14 Thread Soni "It/Its" L.
we've been looking at various ipsec RFCs, mailing list discussions, deployments, etc, and the protocol looks very neat, this "transport mode" stuff looks really useful, but we see no way for an app to use it. we would like to propose a small experiment which we would call "ipsec address famili

[IPsec] Re: IPsec as an address family

2025-01-14 Thread Soni "It/Its" L.
On 2025-01-14 16:53, Paul Wouters wrote: On Jan 14, 2025, at 14:43, Soni "It/Its" L. wrote: > > we really wanna be able to use ipsec in end-user applications... If you look at my Opportunistic IPsec presentations (pdf and videos available), you will an ondemand system triggered by DNS look

[IPsec] Re: IPsec as an address family

2025-01-14 Thread Michael Richardson
Hi, "Soni \"It/Its\" L." wrote: > we've been looking at various ipsec RFCs, mailing list discussions, > deployments, etc, and the protocol looks very neat, this "transport > mode" stuff looks really useful, but we see no way for an app to use > it. RFC2367 is kinda the only docu

[IPsec] Re: IPsec as an address family

2025-01-14 Thread Soni "It/Its" L.
On 2025-01-14 17:36, Michael Richardson wrote: Hi, "Soni \"It/Its\" L." wrote: > we've been looking at various ipsec RFCs, mailing list discussions, > deployments, etc, and the protocol looks very neat, this "transport > mode" stuff looks really useful, but we see no way for an