[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Comments on IKEv2

To: Eric Rescorla <ekr@rtfm.com>
Subject: Re: Comments on IKEv2
From: Jan Vilhuber <vilhuber@cisco.com>
Date: Wed, 5 Dec 2001 15:35:59 -0800 (PST)
cc: ipsec@lists.tislabs.com
In-Reply-To: <200112051754.fB5HsK570688@romeo.rtfm.com>
Sender: owner-ipsec@lists.tislabs.com

On Wed, 5 Dec 2001, Eric Rescorla wrote:

> In part 2 of our series, I look at IKEv2 :)
> 
> (1) Criticality. S 2.5 specifies a "Critical" bit. IMHO, experience
> with PKIX shows that criticality is a rathole. Is there some reason
> that this is actually necessary?
> 
See draft-ietf-ipsec-son-of-ike-protocol-reqts-00.txt, section 4, point 1.

jan
 --
Jan Vilhuber                                            vilhuber@cisco.com
Cisco Systems, San Jose                                     (408) 527-0847

References:

Comments on IKEv2

From: Eric Rescorla <ekr@rtfm.com>

Prev by Date: Re: Son-of-IKE Performance
Next by Date: Re: compare-jfk-sigma.txt
Prev by thread: Re: Comments on IKEv2
Next by thread: RE: Son-of-IKE Selection Criteria?
Index(es):
- Main
- Thread