summary of changes in ipsec-opportunistic-02.txt

[Michael Richardson <mcr@sandelman.ottawa.on.ca>]

-----BEGIN PGP SIGNED MESSAGE-----


(Internet-drafts has been notified. 02 should appear this week.
  http://www.sandelman.ottawa.on.ca/SSW/freeswan/oeid contains
  all revisions)		

1. removed section 11: "Performance Experience"
   - too soon to get real numbers.

2. section 1.2, added text on what occurs if OE setup fails.

3. section 2.1, description spoke of four gateways, diagram
   only shows three.

4. switched to using real IP addresses (from IANA reserved)
   instead of symbolic values.

5. section 3.2, IKE Main Mode exchange was missing one exchange.

6. section 5.2, note about asynchronous DNS lookups

7. section 6.2.1 added explaining why OPT is inappropriate.

8. section 10, unresolved issues, makes the challenge of how
	   to deploy for people who do not control their reverse map
	   out of scope for this document.

9. section 12 -> section 11. to be completed.

10. section 13->section 12, IANA Considerations.
    We believe that there are none.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Finger me for keys

iQCVAwUBO6YMhIqHRg3pndX9AQHGJwP/SHQHIi4lzmionEuROfVEupgpjkwe2PBj
/aCZnNcX4Yb0eRJTdE6eadoMrgrDkLdfuqYL8yAebpYeFkYhT7dy/XwjmnDPAN5L
Ae73y8acgvrs1/gckZmy0aX6c91LAFZClrERshEwbpacjb6DZhlGKVrYGkC33x+T
XoG5Hv/bu0E=
=M9pj
-----END PGP SIGNATURE-----

---

• Prev by Date: rsa/dsa certificates
• Next by Date: Data structure for SPD policies
• Prev by thread: rsa/dsa certificates
• Next by thread: Data structure for SPD policies
• Index(es):
  • Main
  • Thread