1996-01-23 - RE: IPSEC == end of firewalls (was Re: (fwd) e$: PBS NewsHour, Path Dependency, IPSEC, Cyberdog, and the Melting of Mr.)

Header Data

From: Pete Loshin <pete@loshin.com>
To: “cypherpunks@toad.com>
Message Hash: 4ed7dc0f02ceb59ce452f0535cdbae062c97d1cc83fd2ea877fa24c9cd6c1b34
Message ID: <01BAE929.17AF3800@ploshin.tiac.net>
Reply To: N/A
UTC Datetime: 1996-01-23 05:23:31 UTC
Raw Date: Mon, 22 Jan 96 21:23:31 PST

Raw message

From: Pete Loshin <pete@loshin.com>
Date: Mon, 22 Jan 96 21:23:31 PST
To: "cypherpunks@toad.com>
Subject: RE: IPSEC == end of firewalls (was Re: (fwd) e$: PBS NewsHour, Path Dependency, IPSEC, Cyberdog, and the Melting of Mr.)
Message-ID: <01BAE929.17AF3800@ploshin.tiac.net>
MIME-Version: 1.0
Content-Type: text/plain


More to the point, I don't think it's possible to trust the 
security of the network software USERS in any case.

-Pete Loshin
 pete@loshin.com

Perry Metzger wrote:
>Nelson Minar writes:
>> I'm all for the end of ridiculous non-TCP/IP protocols, but does
>> anyone believe this point about encrypted IP traffic eliminating the
>> need for firewalls?
>
>There is division in the IETF community on this point.
>
>Phil Karn (who I have the greatest respect for) thinks IPSEC means we
>can get rid of the firewalls. I, for one, don't -- they are there
>largely because people don't trust that their networking software is
>free of security holes, and cryptography doesn't fix security holes
>for the most part.
>
>Perry








Thread