Re: divergent interpretations of IKE/IPsec - interop issues

[Michael Richardson <mcr@sandelman.ottawa.on.ca>]

>>>>> "Sami" == Sami Vaarala <svaarala@yahoo.com> writes:
    Sami> What new implementors would need, imho, is a document that
    Sami> specifies

  a BCP.

    Sami>   (1) what parts of IKE you need to implement,
    Sami>   (2) what you definitely should not implement because it will
    Sami>       be a waste of your time, and
    Sami>   (3) the broken features that have been deployed (such as
    Sami>       sending AH tunnel when you mean AH transport ;-)

    Sami> Best regards,

  Please read draft-spencer-ipsec-ike-implementation-02.txt
  It has proposed to make this a WG BCP, but there is some discussion as to
whether this is a good idea at this time.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [