[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Ipsec] FW: Remaining issues for IKEv2
On Mon, May 17, 2004 at 03:13:25PM +0300, Tero Kivinen wrote:
> Paul Hoffman / VPNC writes:
> > > Which of the following requirements woudl you be willing to live with?
> > > (You may select more than one):
> > >
> > > B) Method #3 (stateful fragment inspection) is a MUST
> > > D) Method #2 is a MAY, Method #3 is a SHOULD
> > > E) Method #3 is a SHOULD, May #2 is a MAY
>
> What is the difference between D and E. Should the E be "Method #2 is
> SHOULD and Method #3 is a MAY"?
>
> Anyways I can accept method #3 being SHOULD, MAY or even MUST, and
> Method #2 being MAY.
>
> > F) Method #2 is a MAY, and Method #3 is a MAY
>
> Which is to say we do not have any preferred method for fragments when
> using port selectors. I would really like to have one method SHOULD
> (and that being method #3).
I concur. We should recommend (or even mandate) something in this area, I
believe.
Thor
_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec