more on Tuesday's talk

D. Hugh Redelmeier hugh-pmF8o41NoarQT0dZR+AlfA at public.gmane.org
Mon Sep 8 22:54:14 UTC 2003


From: Claudia Schmeing <claudia-H8ClgJW2OFZg9hUCZPvPmw at public.gmane.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hi all,


This is to announce that Claudia Schmeing and Sam Sgro will be giving
their "Opportunistic Encryption with Linux FreeS/WAN" talk and demo 
at the Tuesday, Sept. 9 Toronto Linux Users' Group (TLUG) meeting. Feel 
free to come out if you're in the area.

The talk/demo will be the same one given at this year's OLS 
(linuxsymposium.org). Abstract:

    Linux FreeS/WAN's Opportunistic Encryption (OE) is IPsec to any willing 
    host, using public keys distributed via DNS. OE is currently useful 
    primarily to prevent passive snooping of IP traffic. Its main advantage 
    over traditional IPsec configuration (for example, using shared secrets) 
    is that it does not require prearrangement between system administrators 
    at each end of a potential IPsec connection. We will demonstrate OE by 
    publishing keys in DNS and using those keys to establish a Linux FreeS/WAN 
    connection with minimal configuration. We will then show how a sysadmin 
    might use OE to set local IPsec security policy using FreeS/WAN's 
    "policy groups" configuration mechanism. In the process, we will discuss 
    challenges that OE presents to traditional notions of trust in IPsec peers.
    Last, we will discuss the future of OE: integrating OE with DNSsec 
    authentication.

TLUG location: http://tlug.linux.ca/meetings/meeting.shtml


Cheers,

Claudia

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBP1y5/HDIYXPDEHodAQHZEAP+MZ9bHZcEc9eAol+VQNaHFMOvbYahgOMA
ZIW0UREW9e0yeUEfYfLA/Zl89Ynwb5VZUtF/rH498aCqwOHx7dGosv6Qw1uaShCu
vf12wo5uVvIau9WRuzYSeGXj0V7MqCsIm+Bl18WnO6c1W297df4Q4USVfWNnzQsg
6JMZxqVo/Hk=
=Sp8Y
-----END PGP SIGNATURE-----

--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml





More information about the Legacy mailing list