
Chapter 6 • The IP Security Protocol (IPsec) 97
or other documents submitted to support a fraudulent application) may
exceed the ability of the PKI provider to detect them.
As a result of this potential vulnerability, IPsec requires a mechanism by
which keys can be securely administered and distributed in a way that
associates public keys with the entities that are supposed to own them.
As just noted, IPsec secures IP—not the Internet and certainly not the sys-
tems connected to the Internet or the processes running on those systems.
IPsec must be considered only one part of the organizational security
strategy. While IPsec-protected traffic may pass ...