Re: what level for end-to-end signing?

[Chris Calabrese]

This new proposal from John Kelsey seems an excellent one.
Just the ticket.

As for making the packets unreadable by sniffers, though....
Is that the whole point here?  I mean, I know it's a good thing
for debugging, but that's only when you're debugging.
Under normal conditions, I won't want my logs to be sniffiable.
Encryption should be in the protocol design, but when/whether
to use it is an implementation/administration issue.