In some email I received from Balazs Scheidler, sie wrote:
> * we should support a set of encryption, mac and key exchange algorithms to
>   be negotiated at startup

It is questionable whether we should "roll our own" crypto...mandate the use
of SSL or IPsec.  Not using existing crypto means you have to get the crypto
right and then you've got X.509 issues, etc.  Time is better spent elsewhere
- other people have already "solved this", lets stop reinenting the wheel.

Darren

Reply via email to