Future The Free Software IPsec implementations are mature What need to be done: certificate retrieval (DNSSEC, CMP...) hardware cryptography (for KAME and FreeS/WAN) protocol filtering (done in OpenBSD) Begin to implement IPSRA working group drafts: remote access for clients