Subject: Re: IPsec exportability
To: Jonathan Stone <firstname.lastname@example.org>
From: Michael C. Richardson <email@example.com>
Date: 09/22/1998 15:22:09
>>>>> "Jonathan" == Jonathan Stone <jonathan@DSG.Stanford.EDU> writes:
Jonathan> If we integrate IPsec into the NetBSD kernel in a US
Jonathan> repository, doesn't that mean we won't be able to export the
Jonathan> integrated kernel?
Jonathan> That'd probably mean maintaining a non-IPsec kernel tree,
Jonathan> either with IPsec add-ins in domestic/sys or two separate IP
Jonathan> stacks (ugh).
No. Just maintain all the crypto parts outside the of the US. Import only.
You can still edit all the policy code, since that is needed for AH, which
I have disk space and bandwidth here in Canada, and there is supposed
to an immenent announcement from the other side of the pond soon.
:!mcr!: | Network and security consulting/contract programming
Michael Richardson | Firewalls, TCP/IP and Unix administration
ON HUMILITY: To err is human, to moo bovine.