[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Manual keying and replay prevention



The new auth and esp drafts contain the following identical wording:

4. Conformance Requirements

   Note that support for
   manual key distribution is required, but its use is inconsistent with
   the anti-replay service, and thus a compliant implementation must not
   negotiate this service in conjunction with SAs that are manually
   keyed.  

Why not?

Thanks.

Norm

                   Norman Shulman      Secure Computing Canada
     	        Systems Developer      Tel 1 416 813 2075
                  norm@border.com      Fax 1 416 813 2001



Follow-Ups: