Just a side note (thought).  If you use something like IPSEC for these
connections you can set the 
Security Associations to expire frequently so the keys get changed often.
This helps to overcome some
of the short key issues.  Also triple DES and ECC have very high work
factors even with the shorter (exportable) keys.


-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to