3 ms·
Sounds like the ubiquitous opportunistic encryption that was a goal of FreeS/WAN. http://www.freeswan.org/ http://www.freeswan.org/ 2004/03/01 FreeS/WAN is no
by thwarted 16y ago
Sounds like the ubiquitous opportunistic encryption that was a goal of FreeS/WAN.
http://www.freeswan.org/ http://www.freeswan.org/ 2004/03/01
FreeS/WAN is no longer in active development. Although we've created a solid IPsec implentation widely used to construct Virtual Private Networks, the project's major goal, ubiquitous Opportunistic Encryption, is unlikely to be reached given its current level of community support.
- wmf 16y agoI looked into FreeS/WAN in the early days (1997?) and they made two architectural mistakes: You had to put some special records in your reverse DNS zone (which most people can't do) and it introduced a 30-second delay the first time you contacted each non-FreeS/WAN IP address (which made Web browsing completely unbearable). These misfeatures protected against MITM attacks, but they also ensured that FreeS/WAN would never be deployed.