Re: [IPsec] Does ESP provide all functionality offered by AH?

[Stephen Kent]

In most contexts, there is no real benefit to using two SAs (AH + 
ESP) as you describe.  I agree that, in almost every case, just using 
ESP will suffice. Using ESP in tunnel mode is certainly good enough, 
and less expensive than 2 SAs.

Steve
_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec