New answers tagged


If not, how do the devices get the CA cert? it is either preinstalled or installed manually by network administrator. Responses to certificate requests are installed manually by network administrator or automatically if both, client and CA support some protocol, for example SCEP (Simple Certificate Enrollment Protocol). Using SCEP, network device can ...


Using AH in any real-world setting is a horrible thing to do. You won't lose any security by using ESP instead of AH. In fact, ESP can provide all that you want from AH and more (confidentiality). You can secure an entire IP packet in a ESP tunnel mode which offers data origin guarantee too.

Top 50 recent answers are included