IPSEC Gateways
Often manually configured – doesn’t scale.
DNS-based proposal: KX records, similar to MX records.
What about complex topologies?
Pathfinder packets: see who bounces the packet.
- Do they have the right to? Must be digitally signed by destination.