21 ms·
It does seem a pretty fair that the IPSEC process, and IPSEC in general, has been an utter clusterfuck. Raccoon, etc. are horrible (really anything with IKE).
by rdl 13y ago
It does seem a pretty fair that the IPSEC process, and IPSEC in general, has been an utter clusterfuck. Raccoon, etc. are horrible (really anything with IKE). Free S/WAN had its own problems, but at least Hugh was fairly reasonable. That doesn't necessarily point to NSA, though.
(most of this criticism applies to DNSSEC too)
- tytso 13y agoI can't _prove_ that there were people who was purposely delaying consensus to give their product more time to make it to market. But there were those who had their suspicions...
- newman314 13y agoRacoon is a nightmare to set up. I would say that I'm reasonably technical but gave up after trying to set up a road warrior config for home use passing through dd-wrt and terminating in a server.