From: "Perry E. Metzger" <perry@piermont.com>
Date: Sat, 7 Oct 95 10:48:21 PDT
To: Hal <hfinney@shell.portal.com>
Subject: Re: Certificate proposal
In-Reply-To: <199510060440.VAA23299@jobe.shell.portal.com>
Message-ID: <199510071748.NAA09738@frankenstein.piermont.com>
MIME-Version: 1.0
Content-Type: text/plain



Hal writes:
> Bob Smart <smart@mel.dit.csiro.au> writes:
> >Consider the IPSEC case. The current situation is:
> 
> >1. We go through some process, let's call it Process A, where we determine
> >   that we want to talk to IP address 192.9.8.7.
> 
> This would be, say, a DNS lookup on www.egghead.com.

Just thought I'd point out that IPSEC isn't in general going to use
host keys. Its designed to be more general, and I hope that it ends up
being used much more like Kerberos -- i.e. well known service keys and
user keys.

Perry