[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Latest ipsec-pki-req-04.txt - EKU



Stephen Kent wrote:
> 
> Marcus,
> 
> I agree with most of comments and would like to add a clarification.
> While it may not be appropriate to require the presence of an EKU in
> an IPsec implementation, it may be appropriate to require the ability
> to configure such constraints in every IPsec implementation, to
> ensure that folks have this local configuration option.
> 
> Steve
Oh, absolutely. I just don't think that it's within the mandate of the WG
  to require a certain local policy, which is what this amounts to. Parts of
  this discussion would be appropriate to the IPSP WG.

-- 
----------------------------------------------------------------------
Marcus Leech                             Mail:   Dept 8M70, MS 012, FITZ
Systems Security Architect               Phone: (ESN) 393-9145  +1 613 763 9145
Security and Internet Solutions          Fax:   (ESN) 395-1407  +1 613 765 1407
Nortel Networks                          mleech@nortelnetworks.com
-----------------Expressed opinions are my own, not my employer's------


References: