revision 04 of opportunistic draft available

["Michael Richardson" <mcr@freeswan.org>]

-----BEGIN PGP SIGNED MESSAGE-----


Revision 04 of the draft can be found at:
 http://www.sandelman.ottawa.on.ca/SSW/freeswan/oeid/draft-richardson-ipsec-opportunistic-04-change.txt

Other formats,with and without change bars, older revisions are at:
      http://www.sandelman.ottawa.on.ca/SSW/freeswan/oeid/

Summary of changes:
1) new intro from Sandy Harris
2) figures are all now numbered thanks to a new xml2rfc (Thanks Marshall)
3) SG-C had a funny internal IP address. Fixed now.
4) messages 5G2 and 5G3 were missing from the IKE exchange diagram.
   message 5E3 was incorrectly labelled as being encrypted.
5) some rewording of Aging section: lifespan description and Delete usage.
6) a number of SHOULDs have been made MUSTs.
7) note about KX record added.
8) addiional text about multihomed situation added.
9) warning about not trusted OE tunnels repeated in security considerations.

While this draft could be published as-is, a major stylistic change has been
requested, which is under progress. I wanted to get the nits out before
anything was changed. 

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [


-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Finger me for keys

iQCVAwUBPDDnSoqHRg3pndX9AQEojQP/coiEOmZvfuCwa6IHT6hIyr+xK7WI4inv
6IknjriOYpRJ7wfY9RRUXLMIORxElQ6hDhmP/szZRbWQ4qHqEDnBd/9nYj+lVPKA
iLh3ANS94O79iCS6iqpKLectiL0FcKF3CxyMUYqR6M+lz0SNVehlwR3LmC6ap++A
P55OVHFNbPQ=
=CUlW
-----END PGP SIGNATURE-----