Re: Secure legacy authentication for IKEv2

[David Jablon <dpj@theworld.com>]

Perhaps "extensibility" should include the ability to take advantage
of keys generated by methods that use legacy credentials. 
I've heard this referred (somewhat redundantly) as "future extensibility"
in other protocols.

Although I didn't see this capability in the SLA draft, could it be added?

-- David

At 09:30 AM 12/19/02 -0800, Paul Hoffman / VPNC wrote:
>Greetings again. The following draft comes out of the meeting we had after the IPsec WG meeting in Atlanta. It represents the thinking of many folks about the cleanest way to do legacy authentication in IKEv2. Please read it and comment here on the list.
>
><http://www.ietf.org/internet-drafts/draft-hoffman-sla-00.txt>
>
>--Paul Hoffman, Director
>--VPN Consortium