Or ESP, with or without encryption as well.
But that does not acheive quite the same thing, because the iSCSI digest is
another lightweight checksum, albeit stronger than most, and does not
provide authentication. So AH or ESP is stronger, but slower.
Maybe Cisco are assuming another layer deals with the errors. However, to
get an interoperable and efficient implementation requires the capability
to do whatever combination is required, along with sensible defaults.
Andrew
--On Tuesday, January 07, 2003 12:31:18 +0000 Alan Cox
<alan@lxorguk.ukuu.org.uk> wrote:
> On Tue, 2003-01-07 at 00:39, Andrew McGregor wrote:
>> optional stronger TCP digest for IPv6, and if used with that then there
>> is no need for the iSCSI digest. Otherwise, well, play dice with the
>> data. Loaded in your favour, but still dice.
>
> There is no need for the iSCSI digest anyway. You can use IP-AH to
> achieve precisely the same thing, and strong guarantees already in a
> standards compliant manner.
>
> Alan
>
>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Tue Jan 07 2003 - 22:00:35 EST