Subject: Re: Bugs in PF_KEY marshalling, socket-buffer overflow
To: None <itojun@iijlab.net>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-net
Date: 05/21/2004 22:19:21
-----BEGIN PGP SIGNED MESSAGE-----
>>>>> "itojun" == itojun <itojun@iijlab.net> writes:
itojun> no.
itojun> ask Craig Metz who designed PF_KEY. you can reach him
itojun> at cmetz at inner.net.
It was a neat idea, but was a mistake.
The idea is 10 years old, from before we even Photorus, and we thought
that we'd have a multitude of key managers hanging out. The reality is
that we don't yet have one good key manager, let alone multiple ones.
Making it un-reliable or multicast was a mistaken.
And, Craig Metz rarely answers emails these days.
- --
] "Elmo went to the wrong fundraiser" - The Simpson | firewalls [
] Michael Richardson, Xelerance Corporation, Ottawa, ON |net architect[
] mcr@xelerance.com http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Finger me for keys
iQCVAwUBQK64qIqHRg3pndX9AQGQYgQAoztDKfN4Jy4sT9g5aF7CSwjsA7He+vVK
te8ccMXxo9MO1lsAFxiZAkPIfYtj7HwG3y2gL4qYT7mGqVCPbbn/tkPrsag/Kw7h
mIBanlJ5/K1c8FEZtgz7B1KXfBlrKGfjE7G5ITEiWDJ9XPG7ApkHkRc48SQ5CikU
TA+LnoV605s=
=0ccJ
-----END PGP SIGNATURE-----