[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IKE Rekeying



Title: IKE Rekeying
There was a draft written by Tim Jenkins before he retired from IPsec ;)  ( I know you still monitor the lists though Tim :)
 
There was a lack of consensus in the typical IPsec fashion with 1 or 2 very loud voices against it (particularly his concept of Continuous Channel), and Tim gave up on it when he left TimeStep.  It has a lot of very good, very detailed analysis.  There was definitely more agreement with his phase 2 rekeying analysis than his phase 1 rekeying analysis, in case that's what you were looking for.
 
Some people comply with this expired draft, and some don't.  So don't assume interoperability if you implement it.  But it is definitely worth reading if you have rekeying decisions to make.
 
I'll send a copy to you in a private email.
 
Stephane.
----- Original Message -----
From: Jerome Freedman Jr
To: 'ipsec@lists.tislabs.com'
Cc: Jay Xiong
Sent: Friday, May 18, 2001 2:41 PM
Subject: IKE Rekeying


Hi,

   Has anyone done any work on IKE rekeying? Are there any drafts? Anybody want to write one?


Jerry Freedman,Jr

 


References: