[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IBM VPN Bakeoff Issues



Richard Draves wrote:
> 
> In theory IPsec could support many combinations and permutations of headers.
> (Infinitely many in fact.) In current practice it appears that only a few
> possibilities make sense. I agree that only these few possibilities should
> be mandatory. But I strongly object to ruling out combinations that today
> appear unnecessary. Who knows what the future will bring? Allowing
> implementations today to behave "Hmm, they asked for BAC. That can't be
> right. I'll pretend it was ABC." will unnecessarily limit future
> flexibility.

Here, here.


References: