[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: IBM VPN Bakeoff Issues



In theory IPsec could support many combinations and permutations of headers.
(Infinitely many in fact.) In current practice it appears that only a few
possibilities make sense. I agree that only these few possibilities should
be mandatory. But I strongly object to ruling out combinations that today
appear unnecessary. Who knows what the future will bring? Allowing
implementations today to behave "Hmm, they asked for BAC. That can't be
right. I'll pretend it was ABC." will unnecessarily limit future
flexibility.

Rich


Follow-Ups: