[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Simplifying IKE
This assumes that the phase 1 does live longer than phase 2. Quite apart
from implementations killing off the phase 1 before the renogitation, it may
well be policy that the phase 1 SA has a similar life to the pase 2 SA.
Chris
> QM with PFS has never really been all that "quick". However,
> it seems a
> valuable attribute that the relatively long-lived Phase 1 IKE
> SA's allow
> for seamless Phase 2 rekeying (when done right). This would
> be much harder
> if there were just one single negotiation.
>
> Derrell
>
> --On Thursday, August 9, 2001 7:52 PM -0400 Bill Sommerfeld
> <sommerfeld@East.Sun.COM> wrote:
>
> >> Ari Huttunen writes:
> >> > Thus my preference would be to have a four packet
> phase 1 (base mode)
> >> > and a four packet quick mode.
> >>
> >> Gad. Doesn't anybody care about link up times???
> >
> > Smooshing phase 1 and phase 2 together begins to look very
> attractive
> > when quick mode isn't very (quick).
> >
> > - Bill
> >
> >
>
>
>
>
>
> This footnote confirms that this email message has been swept by
> MIMEsweeper for the presence of computer viruses.
>
-----------------------------------------------------------------------------------------------------------------
The information contained in this message is confidential and is intended
for the addressee(s) only. If you have received this message in error or
there are any problems please notify the originator immediately. The
unauthorized use, disclosure, copying or alteration of this message is
strictly forbidden. Baltimore Technologies plc will not be liable for direct,
special, indirect or consequential damages arising from alteration of the
contents of this message by a third party or as a result of any virus being
passed on.
In addition, certain Marketing collateral may be added from time to time to
promote Baltimore Technologies products, services, Global e-Security or
appearance at trade shows and conferences.
This footnote confirms that this email message has been swept by
Baltimore MIMEsweeper for Content Security threats, including
computer viruses.