What is lightweight encryption? Does lightweight means insecure?
No. I don't know how much you know about encryption technologies but let me
tell you that there is technologly which works better on embedded devices
than other technologly. Simply because it was optimized for that purpose.
Using a CPU intense encryption does not make the communication more or less
insecure. The key is the overall security concept.
Since the focus of batman are embedded devices it seems obvious that we should
choose that direction.
Is it easier, because you are not familiar with IPSEC?
You misunderstand. It is not a question of you and me. There are people in
this world who would like to use batman / mesh technology without being an IT
expert. That applies to most of our users ...
building unsecure crypto ist worse then having no crypto, it would be
"sicherheitsimulation". building strong crypto is not easy, so many
failed to develop and implement it with more and better
cryptospecialists the the batman team has.
I totally agree. I never proposed to reinvent the wheel by building our own
encryption technology. I'm well aware of the many issues which arise once you
choose that path.
Some batman developer once told me, that implementing/supporting
discovery inside batman is a bad idea, as they want to have batman as
slim as possible. how does integrating cryptotunnels in a routingprotocol
does get conform to that?
I don't see the connection between your example and the current context.
Batman already builds that tunnel. Why should we not extend that existing
feature ? Sure, you could create another tunnel in the tunnel.
The question is whether we give the ordinary user a tool at hand which enables
him to control the access of his internet gateway. What do you think ?