Hi, Iam a newbie here, pardon me for this dumb question. Do ISAKMP do MAC on main mode so as to prevent an attacker take control over the responder's selection of transform payloads sent to it ?? If not, what is the design consideration of not doing the MAC ?? I would appreciate if someone could point me to some kind of discussion/whitepaper over this issue. Thanks, Venkat.