[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Latest ipsec-pki-req-04.txt - EKU
Stephen Kent wrote:
>
> Marcus,
>
> I agree with most of comments and would like to add a clarification.
> While it may not be appropriate to require the presence of an EKU in
> an IPsec implementation, it may be appropriate to require the ability
> to configure such constraints in every IPsec implementation, to
> ensure that folks have this local configuration option.
>
> Steve
Oh, absolutely. I just don't think that it's within the mandate of the WG
to require a certain local policy, which is what this amounts to. Parts of
this discussion would be appropriate to the IPSP WG.
--
----------------------------------------------------------------------
Marcus Leech Mail: Dept 8M70, MS 012, FITZ
Systems Security Architect Phone: (ESN) 393-9145 +1 613 763 9145
Security and Internet Solutions Fax: (ESN) 395-1407 +1 613 765 1407
Nortel Networks mleech@nortelnetworks.com
-----------------Expressed opinions are my own, not my employer's------
References: