Re: Do we actually need dynamic ports?

[Michael Richardson <mcr@sandelman.ottawa.on.ca>]

-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Jan" == Jan Vilhuber <vilhuber@cisco.com> writes:
    Jan> to try and fold some (not all) of the jenkins rekey-draft into IKEv2,
    Jan> so that rekey behaviour is spelled out precisely? That would certainly
    Jan> help.

  Yes/no.

  Yes, we need clear rekeying text.
  I suggest that we should use the "use keys as soon as they negotiated"
concept described in draft-spenser-implementation-*.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Finger me for keys

iQCVAwUBPKztQIqHRg3pndX9AQEVrgQAoynWtrVAN4neMNQksU4ZbCA0YsFMnbNY
B1TXeQJjGJo8kZMmabJ+O+vNppHKeMhAUkeW2jUUd61UDMYlUwUc1ikdDPX58RoC
eRnlzTKnuz3DgP6TzsGuAVJJ2zBj0hndN3Fz0gREU9Rq7NaAMz0prAiyM8qbou+O
G8Qk3jtVfUU=
=WsWC
-----END PGP SIGNATURE-----