[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Unspecified Lifetime
>If you set lifetime to kilobytes (say 5KB), but then your session stops short of
>this limit (say at 4KB) - then without some large time-based lifetime limit it
>will be alive forever - I am not sure if I want this.
Slava,
That's a good point, however I expect that there might be situations where
folks really do want their SA's to stay around essentially forever (without
regard to the security implications thereof). If we say that there's always
an overriding time-based expiration, there's now no way to negotiate that. If
we leave it as it is (and/or with more clarification along the lines of my
earlier note), you can still configure the behavior you want by configuring a
time-based lifetime. On the third hand, I don't have a lot of religion here.
Anyone else care to weigh in?
Derrell
Follow-Ups:
References: