Mailing List Archive

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John Saylor, at 20:57 -0400 on 4 Apr 2000, wrote:

> I know that you can use PGPnet to connect to a VPN box using
> IPsec. I'm not so sure you can do the same thing with gpg. Has anyone
> tried this? Does anyone know if this kind of support is planned in the
> future? Is it even on the radar?

Note that PGPnet has little to nothing to do with the OpenPGP protocol, or
even PGP in that matter. The name PGPnet, I'm guessing, is more
marketting than anything else to get you to associate the security that
comes with PGP together with PGPnet, even though they are weakly related.

- --
Frank Tobin http://www.uiuc.edu/~ftobin/

"To learn what is good and what is to be valued,
those truths which cannot be shaken or changed." Myst: The Book of Atrus

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (FreeBSD)
Comment: pgpenvelope - http://pgpenvelope.sourceforge.net/

iEYEARECAAYFAjjq6e0ACgkQVv/RCiYMT6MBlgCgn3+cNhRm/H9Guy1SvD5yxWUN
CQ8AniZtB8kDsWhws8bfVfS4wSLBgyS0
=BNbC
-----END PGP SIGNATURE-----

On Tue, 4 Apr 2000, John Saylor wrote:

> I know that you can use PGPnet to connect to a VPN box using
> IPsec. I'm not so sure you can do the same thing with gpg. Has anyone

IPsec has nothing in common with OpenPGP or S/MIME. If you are using
a Linux kernel you should checkout FreeS/WAN (www.freeswan.org) which
is a free implementation of IPSec for GNU/Linux.

Werner


--
Werner Koch OpenPGP key 621CC013
OpenIT GmbH tel +49 211 465357
Birkenstr. 12 email info@openit.de
D-40233 Düsseldorf http://www.openit.de

L. Sassaman, at 00:53 -0700 on Wed, 5 Apr 2000, wrote:

> Actually, they are very closely related. PGPnet is an IPsec implementation
> that allows for the use of PGP authentication/encryption by both parties.
> It is part of the PGP suite. (Remember that PGP is not just the OpenPGP
> program; it is also PGPdisk, PGPnet, and the related plugins.) One
> *should* associate the security that comes with PGP together with
> PGPnet; PGPnet is only as secure as PGP itself.

If you are calling PGP the entire suite of tools, there is no blanket
security that you can apply to the entire suite. You have to break the
issue down more; you can't abstract it that much. Saying PGPnet and the
unnamaed program that implements OpenPGP are equal is ridiculous; just
because they use similar algorithms has no effect on the possible
insecureness of the protocols involved. Given your style of argument, I
could abstract the Kerberos and ssh systems (public key logins, to
simplify) to say that the protocols are as secure as one another (given
that they are using similar algorithms).

--
Frank Tobin http://www.uiuc.edu/~ftobin/

"To learn what is good and what is to be valued,
those truths which cannot be shaken or changed." Myst: The Book of Atrus