[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ISAKMP and SSL

At 3:49 PM -0700 4/30/03, Mark Baugher wrote:
At 05:40 PM 4/30/2003 -0400, Stephen Kent wrote:
At 7:50 PM +0200 4/30/03, Ibrahim wrote: 
Hi all,
When I read RFC 2408 they described ISAKMP as a generic key management
protocol for all security protocols but till now the large deployment of
ISAKMP was only with IPSEC
My question is, can we use it with SSL/TLS?
The goal of this issue is to add new services in SSL/TLS (identity
protection, attribute certificate passing for access control schemes,
non-repudiation…).
Thank you in advance
Ibrahim

SSL/TLS has its own, tightly couple key management protocol, so it would not be appropriate to try to use ISAKMP.

I think the confusion comes from the fact that the ISAKMP RFC says it could be applied to TLS.

Mark

It lied :-)

Steve