It looks like several votes in favor of deterministically choosing which SA to kill in the case of duplicate SAs, based on initiator nonce. This definitely should be in the spec, since everyone has to agree. We can do it in the next editing pass. I haven't seen any objections. Radia