[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: remove TS from IKEv2 (RE: Addresses in traffic selectors in IKEv 2)



On Tue, 19 Mar 2002, Markku Savela wrote:
> However, if I just could get the IKEv2 designers to see this minor
> distinction between SPD stuff and SAD stuff, and treat TS as SAD
> stuff, it seems almost perfect as defined. :-)

The problem with this "minor distinction" is that it ignores the way IKE
is actually used.  People don't want a separate protocol, especially one
that hasn't been designed yet, to do SPD setup.  They want to do the whole
job of connection setup with IKE, and to get that they are even willing to
settle for a fairly simple subset of SPD functionality.

                                                          Henry Spencer
                                                       henry@spsystems.net