[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IKE Rekeying
Title: IKE Rekeying
There was a draft written by Tim Jenkins before he
retired from IPsec ;) ( I know you still monitor the lists though Tim
:)
There was a lack of consensus in the typical IPsec
fashion with 1 or 2 very loud voices against it (particularly his concept of
Continuous Channel), and Tim gave up on it when he left TimeStep. It has a
lot of very good, very detailed analysis. There was definitely more
agreement with his phase 2 rekeying analysis than his phase 1 rekeying analysis,
in case that's what you were looking for.
Some people comply with this expired draft, and
some don't. So don't assume interoperability if you implement it.
But it is definitely worth reading if you have rekeying decisions to
make.
I'll send a copy to you in a private
email.
Stephane.
----- Original Message -----
Sent: Friday, May 18, 2001 2:41 PM
Subject: IKE Rekeying
Hi,
Has anyone done any work on IKE
rekeying? Are there any drafts? Anybody want to write one?
Jerry Freedman,Jr
References:
- IKE Rekeying
- From: "Jerome Freedman Jr" <jefreed@nortelnetworks.com>