If you mean widespread, point to point / peer to peer IPsec - yes, there is
a distinct lack of (free, easy, global) PKI out there.
There are steps in the right direction though, such as MS's Direct Access
...
/TJ
On Oct 31, 2010 12:02 AM, "Masataka Ohta"
<mohta(_at_)necom830(_dot_)hpcl(_dot_)titech(_dot_)ac(_dot_)jp>
wrote:
TJ wrote:
I would be quite curious to know your definition of failure, given that
IPsec is currently deployed, and working in "more than a few" deployments
...
Sorry for lack of clarification.
My context is IPsec in the Internet, which excludes VPNs.
Do you know some major application over the Internet using IPsec
with transport mode?
Masataka Ohta
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf