But what if the core didn't need to change and you key-n-encrypt before you map-n-encap. In fact you could combine the "key" part and "map" part together in the same lookup.
I'm just saying. :-) Dino > On Sep 7, 2013, at 6:05 AM, Roger Jørgensen <[email protected]> wrote: > > ---------- Forwarded message ---------- > From: Roger Jørgensen <[email protected]> > Date: Sat, Sep 7, 2013 at 3:05 PM > Subject: Re: decentralization of Internet (was Re: Bruce Schneier's > Proposal to dedicate November meeting to saving the Internet from the > NSA > To: Noel Chiappa <[email protected]> > Cc: IETF Discussion <[email protected]> > > > On Sat, Sep 7, 2013 at 2:20 PM, Noel Chiappa <[email protected]> wrote: >>> From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= <[email protected]> >> >>> The userbase and deployment are relative small atm so it's doable to >>> get fast deployment to. >> >> Alas, now that I think about the practicalities.... I don't think the average >> router has enough spare computing power to completely encrypt all the >> traffic. > > I don't really see that as an issue, it's just a matter of engineering > and building > the router in a way that they can do it. AFAIK I think most routers have the > options of being extended by dedicated encrypt-all-traffic tasks? Probably > some > changes needed on the software layer to use the extension but that's doable. > > It is also just the situation right now on the router side. In general > should our > current technology and processing power be up for the job if needed. > > >> Whether or not encrypting just the source+dest addresses, and the sort+dest >> port (conviently next to each other in one block) is enough to do much good, >> and if the average router has enough spare crunch to do even that, is a good >> question. > > Isn't the payload the important part to protect? the content of the package? > > > -- > > Roger Jorgensen | ROJO9-RIPE > [email protected] | - IPv6 is The Key! > http://www.jorgensen.no | [email protected] > > > -- > > Roger Jorgensen | ROJO9-RIPE > [email protected] | - IPv6 is The Key! > http://www.jorgensen.no | [email protected] > _______________________________________________ > lisp mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/lisp _______________________________________________ lisp mailing list [email protected] https://www.ietf.org/mailman/listinfo/lisp
