Re: QoS selectors (was LAST CALL: IKE)

[Henry Spencer <henry@spsystems.net>]

On Tue, 1 Jul 2003, Stephen Kent wrote:
> >The only thing that comes to mind is to add a notify payload when 
> >rekeying that identifies the SPI of
> >the SA being rekeyed. But this is a bits on wire change...
>
> ...Using the SPI to identify an SA being rekeyed avoids ambiguity, no 
> matter what the source, and that seems worthwhile.

This sounds like an excellent idea.  One substantial headache with IKEv1
was the extent to which the responding end had to *guess* what the
initiating end was really trying to do.  The fewer such ambiguities there
are, the better. 

                                                          Henry Spencer
                                                       henry@spsystems.net