Re: AH and mutable fields, how deep to look?

[Stephen Kent <kent@bbn.com>]

>  > To make it clear, perhaps change the graphics into (not too happy with
>>  this, but):
>>
>>        ------------------------------------------------------------
>>  IPv6  |             |hop-by-hop, dest*, |    | dest |     |      |
>>        |orig IP hdr  |routing, fragment. | AH | opt* | TCP | Data |
>>        ------------------------------------------------------------
>>        |<-- mutable fields processing -->/////<--immutable------->|
>>        |<---- authenticated except for mutable fields ----------->|
>
>	this is important, when implementing multiple AH on a packet
>	(crazy example but possible, and we had interop problem in Connectathon
>	between KAME and Solaris)
>
>itojun

I'm not sure I understand your comment. Are you saying that the 
diagram above is right and handles nested AH instances as you would 
like, or that it is not right?

Steve