Re: Proposed resolution to Issue 1

["Neal Taylor" <ntaylor@vitalsoft.com>]

Charlie:

<snip>

> want to defer such sending.
> .sp
> The responder can be assured that the initiator is prepared to receive
> messages on an SA if either (1) it has received a cryptographically valid
> message on the new SA, or (2) the new SA rekeys an existing SA and it
> receives an IKE request to close the replaced SA.

Case (2) may happen for other reasons and so is not a reliable indicator
that the initiator is ready to receive. These other reasons include the
expiration of the SA lifetime during the rekeying process which could be the
result of a poorly configured system or unexpectedly high data rates.
_____________________________
Neal Taylor
Netlock Technologies
_____________________________