8 ms·
Imagine a world where all IP packets are indistinguishable from any other, where TCP cannot be exploited to block SSH connections, where even key exchange/agree
by esbranson 9y ago
Imagine a world where all IP packets are indistinguishable from any other, where TCP cannot be exploited to block SSH connections, where even key exchange/agreement cannot be blocked without blocking all IP packets. In such a world, blocking Wikipedia would be all but impossible without taking the totalitarian country to ruin.
But IPsec was sabotaged thoroughly. draft-ietf-ipsec-inline-isakmp was silenced. Now every protocol must implement a security policy and framework individually, without exception. SSH, TLS, EAP oh my (that is a lot of EAP methods.)
Vae victis. Woe to the conquered. RIP IPsec.