Re: Specification of tunnel/transport attribute in IKEv2

[Henry Spencer <henry@spsystems.net>]

On Wed, 15 May 2002, Prof. Ahmed Bin Abbas Ahmed Ali Adas wrote:
> In protocol architecture, the policy making should be totally isolated from
> the Key Agreement Protocols or Key Transport Protocols.

This is a reasonable principle, but it does not change what I said:
separating the two issues still leaves two issues to be dealt with.

The policy checking within IKE is important, and removing it from IKE does
not remove the requirement that it be dealt with somehow.  Esthetically
distasteful though it may be, dealing with it within IKE has been quite
successful and has met users' needs well. 

                                                          Henry Spencer
                                                       henry@spsystems.net