Re: ESP+AH

[itojun@iijlab.net]

>>If I send an proposal transform of ESP+AH, is it valid to receive the
>>propsal back as AH+ESP (instead of ESP+AH)?
>This will be an implementation specific issue, but it should not be a
>problem.  Irrespective of the ordering of the proposal, the only way it
>makes sense to apply both AH and ESP is [AH][ESP].

	from experiences from past interop tests, i would be much happier if:
	- the order of proposal on IKE packet
	- interpretation of proposal
	are exactly specified in the document.  we saw a lot of varied
	interpretation because of the document's unclarity (like how you
	specify "tunnel" in the proposal).  it is not good to solve protocol
	ambiguity in interop events.  protocol documents must be unambiguous
	enough so that anyone who reads the document will end up in the
	same interpretation.

itojun