[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Internet Drafts -- AH and ESP specs
Stephen,
I'm just wondering if we should be adding anything to the protocol this
late, and perhaps this should go in IPSecond?
I also don't see why we would wish to send a whole ISAKMP Notify message
just to state that we are using replay. Why not just place an attribute
in the transform that states "Yes, I'm using replay". This attribute
would merely be informational. We once had this "Replay attribute", but
it was used for negotiation.
But again, I'm against adding anything to the protocol at this late
stage.
On Friday, October 03, 1997 4:37 PM, Stephen Kent [SMTP:kent@bbn.com]
wrote:
> Roy,
>
> The AH and ESP specs call for the receiver to use a NOTIFY to
> inform the sender of the receiver's intent to employ anti-replay measures,
> so it is not a negotiation. If you look at the last messages on the topic,
> dated 8/26 (from Dan Harkins( and 8/28 (from me), the resolution was to
> make use of this form of notification (proposed by Dan), and the only
> unresolved point was whether to make the transmission of the NOTIFY a MUST
> or a SHOULD.
>
> Steve
>
>
Follow-Ups: