Opportunistic Encryption using the Internet Key Exchange (IKE)
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 44
- Abstract
- This document describes opportunistic encryption (OE) as designed and implemented by the Linux FreeS/WAN project. OE uses the Internet Key Exchange (IKE) and IPsec protocols. The objective is to allow encryption for secure communication without any pre-arrangement specific to the pair of systems involved. DNS is used to distribute the public keys of each system involved. This is resistant to passive attacks. The use of DNS Security (DNSSEC) secures this system against active attackers as well. As a result, the administrative overhead is reduced from the square of the number of systems to a linear dependence, and it becomes possible to make secure communication the default even when the partner is not known in advance. This memo provides information for the Internet community.
- Publication Date
- 2005-12-01
- Status Note
- Informational
- DOI
10.17487/RFC4322- Link
- https://doi.org/10.17487/RFC4322
- Author(s)
- Michael RichardsonDr. D. Hugh Redelmeier
- Keyword(s)
- Linux frees/wan, IPSEC, DNS, DNSSEC
Latest version of IETF RFC 4322
Document Versions — IETF RFC 4322
-
▶ IETF RFC 4322 (2005-12-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2119 [Active*]
- IETF RFC 2401 [Superseded*]
- IETF RFC 2407 [Superseded*]
- IETF RFC 2408 [Superseded*]
- IETF RFC 2409 [Superseded*]
- IETF RFC 2535 [Superseded*]
- IETF RFC 3110 [Active*]
Bibliographic Reference(s)
- H. Spencer and Redelmeier, D., "Opportunistic Encryption", paper, http://www.freeswan.org/ oeid/opportunism-spec.txt , May 2001. EXTERNAL
- IETF RFC 791 [Active*]
- IETF RFC 1034 [Active*]
- IETF RFC 1464 [Active*]
- IETF RFC 1812 [Active*]
- IETF RFC 1984 [Active*]
- IETF RFC 2367 [Active*]
- IETF RFC 2538 [Superseded*]
- IETF RFC 2663 [Active*]
- IETF RFC 2671 [Superseded*]
- IETF RFC 3330 [Superseded*]
- IETF RFC 3445 [Superseded*]
- IETF RFC 3526 [Active*]
- IETF RFC 4025 [Active*]
- IETF RFC 4033 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4322.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4322, Opportunistic Encryption using the Internet Key Exchange (IKE). Available at https://doi.org/10.17487/RFC4322
Snippet:
IETF RFC 4322, Opportunistic Encryption using the Internet Key Exchange (IKE). Available at https://doi.org/10.17487/RFC4322
HTML (ISO 690 compliant)
Preview:
IETF RFC 4322, Opportunistic Encryption using the Internet Key Exchange (IKE). Available at https://doi.org/10.17487/RFC4322
Snippet:
<span class="citation"><cite>IETF RFC 4322</cite>, Opportunistic Encryption using the Internet Key Exchange (IKE). Available at <a href="https://doi.org/10.17487/RFC4322" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4322</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4322, Opportunistic Encryption using the Internet Key Exchange (IKE)
doi: 10.17487/RFC4322
url: https://doi.org/10.17487/RFC4322
doi: 10.17487/RFC4322
url: https://doi.org/10.17487/RFC4322
Snippet:
<li> <cite id="bib-rfc4322">IETF RFC 4322</cite>, Opportunistic Encryption using the Internet Key Exchange (IKE) <span class="doi">10.17487/RFC4322</span> </li>
Referenced By
- IETF RFC 5387 [Active*]
- IETF RFC 6071 [Active*]