Cory Petkovsek wrote:

> Maybe it's just me, but I'm surprised that nfs is so widely used.

NFS is widely used because for many years there was no alternative.
Its security model predates laptops and open LANs.

> Sheesh, putting ipsec on every machine and using opportunistic
> encryption internally seems more and more attractive and worth the
> setup.

How much harder would it be to set up IKE?  Is it possible to have a
star configuration for IKE and a fully connected graph for the IP
traffic itself?

The problem with opportunistic encryption is that a bad guy can
prevent it (sometimes).

-- 
Bob Miller                              K<bob>
kbobsoft software consulting
http://kbobsoft.com                     [EMAIL PROTECTED]
_______________________________________________
EuG-LUG mailing list
[EMAIL PROTECTED]
http://mailman.efn.org/cgi-bin/listinfo/eug-lug

Reply via email to