[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: WG last call for IPv4 AH and ESP
Perry,
I believe it would be a mistake to mandate that users must use
one of (auth inside encryption) or (auth outside encryption). There
is no need to create such restrictions. Permit folks to do it
either way by leaving the flexibility in the specification. Then
users can choose the security service that they desire. We should
be focusing on defining mechanisms and try to leave policy matters
open to users.
Regards,
Ran
Follow-Ups:
References: