Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 50828

For questions about the cryptographic protocols which form the basis of IPsec, which is one of the common security schemes used on the throughout. For general questions about IPsec, consider if your question fits our sister sites Super User and/or Security Stack Exchange better.

2 votes
1 answer
2k views

Why a "Next Header" field is part of ESP trailer?

Please explain are there any reason under the hood to place "Next Header" field in ESP trailer instead of ESP Header ?
Elena Gurevich's user avatar
0 votes
2 answers
872 views

why IPSec transport mode is restricted for host-to-host communication , or host-to-gateway w...

Transport mode is allowed between two end hosts only; tunnel mode is required when at least one of the endpoints is a "security gateway" (intermediate system that implements IPsec functionality, e.g. … But in case all addresses are public and scalability is not an issue, why transport mode IPsec SAs cannot be used between two security gateways ? …
Elena Gurevich's user avatar
0 votes
Accepted

why IPSec transport mode is restricted for host-to-host communication , or host-to-gateway w...

The access control functions that are an important part of IPsec are significantly limited in this context, as they cannot be applied to the end-to-end headers of the packets that traverse a transport …
Elena Gurevich's user avatar