FW: [vpn] VPN - encryption

[Kent Dallas]

Originally sent this privately by mistake (reply instead of reply-all...).

KD

-----Original Message-----
From: Kent Dallas [mailto:kent at dalliesin.com]
Sent: Friday, November 16, 2001 1:29 PM
To: 'Ranjbar Hassan'
Subject: RE: [vpn] VPN - encryption


Ranj,

In order for a VPN to be "virtually private", it must leverage some method
to attain privacy.

Encryption, combined with proper key management, is commonly used to provide
privacy (and is also often used to provide authentication and integrity
services as well).

Whether or not it is possible to have VPN without encryption depends on how
you define VPN.  Some folks take a narrow definition and say that a VPN is
"encrypted tunnels across the Internet", and then, by definition, the VPN
must include encryption.  Others take a broader definition of VPN, saying
that a VPN is a "logical network constructed across a shared or public
network that provide features and functionality comparable to a private
network, at a lower cost" and believe privacy services may be delivered by
other means (such as authentication tied to access control).

IPsec includes a concept of null encryption (no encryption), but it is
really only included for the purposes of troubleshooting, not production
use.

I happen to accept the broader definition, so I beleive it is possible to
have a VPN without encryption, and encryption is therefore optional (in
certain architectures).  But that's just my opinion, and you know what they
say about opinions...

Hope this helps,
Kent Dallas

-----Original Message-----
From: Ranjbar Hassan [mailto:ranjbar at ipsemiconductors.com]
Sent: Friday, November 16, 2001 12:22 PM
To: vpn at securityfocus.com
Subject: [vpn] VPN - encryption


Hi
I've read a bit about VPN on different sites. My question is :
What is the relation between VPN and encryption? Is it possible to
have VPN without encryption? is encryption with VPN optional or a
must?

Best regards,
Ranj


VPN is sponsored by SecurityFocus.com



VPN is sponsored by SecurityFocus.com