Re: : FW: IPSec use with Diameter (from the IPSEC WG list)

[email protected] wrote:

> Have suggestions for an eratta entry?

John, do you remember why we put it in this
text? I have a vague memory that it had to do with
a wish from the IESG that the limitations of IPsec
usage across domains needs to be described. Was this
so? Are all such limitations found to be non-existent?
I think not, although the text in question might be in
error.

Is Scott's concern that specification-wise, everything
is possible? I think the original concern had more to
do with practical implementations and experience than
what would theoretically be possible. Perhaps this
is the part that should be clarified, whether the
issue is with specs or with common implementations?
Or is the issue simply no longer relevant at all?
Or is it not relevant if you use RFC2401 and PAD?

--Jari