Re: Choosing between IKEv2 and JFK

["Angelos D. Keromytis" <angelos@cs.columbia.edu>]

In message <15495.61112.901790.504193@thomasm-u1.cisco.com>, Michael Thomas wri
tes:
 >
 >   Huh? The certs are only there for identity. If I 
 >   want to have two different SA's so I get differential
 >   queuing treatment, there's nothing that says that I
 >   need two different identities. I just change the
 >   traffic selectors. This isn't any different than
 >   RSVP flow selectors and queuing treatment.

If you reuse the same certs, then you can simply reuse cached results. Given
that, I assumed that different QoS levels corresponded to different 
credentials.
-Angelos