Subject: PKINIT/PKCROSS question

From: Michael Thomas <[email-masked]>
Date: Thu, 1 Nov 2001 09:36:14 -0800 (PST)

One of the well known problems with IKE is its
lack of a stateless return routability test to
thwart spoofing attacks which cause the IKE to do
useless and expensive DH operations. PKINIT and
PKCROSS seem to faithfully reproduce this threat.

For that matter, while not as computationally
complex as public key crypto, you could argue that
even _base_ Kerberos has this vulnerability. 

	    Mike