[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: AHbis WG LC: need for source address based selectors



At 7:52 AM -0700 6/18/03, James Kempf wrote:
>Steve,
>
>>  The primary motivation in the IETF for developing standards is to
>>  promote interoperability. What you seem to suggest is a that we not
>>  preclude someone from saying that they comply with IPsec, even
>though
>>  they would be following a demuxing policy that is not used in any
>>  extant implementations and thus would not be interoperable with any
>>  of these implementations.  This does not promote interoperability;
>>  all it does is allow someone to claim conformance with a standard.
>>  That does not seem constructive and, as I noted, it only add to
>>  complexity.
>>
>>  Am I missing something in your suggestion?
>>
>
>I read Tero's suggested text as only applying to a new SPI in the
>reserved region. It would therefore promote interoperability for that
>SPI, but should not impact any other. Perhaps the text needs to be
>strengthened to make this clearer?
>
>             jak

reserved SPIs are a holdover from the early days of IPsec and are 
generally not used. But, the change in processing that has been 
proposed is simply not consistent with the overall IPsec processing 
model and saying that it applies to only this one SPI does not make 
life better. I'm afraid that this is just a bad fit.

Steve