Re: AD review: draft-ietf-kink-kink [section 1-4]

At Wed, 02 Feb 2005 13:56:54 -0500,
Sam Hartman <[email protected]> wrote:
> 
> >>>>> "Shoichi" == Shoichi Sakane <[email protected]> writes:
> 
>     >> Section 4.3:
>     >> 
>     >> [**] I need explicit review from the IPsec reviewer of this
>     >> section to make sure it is compatible with 2401bis.  IN
>     >> addition, any differences between how this works and how IKE
>     >> would set up the same SA need to be called out.  It is fine for
>     >> there to be differences, but I want to make sure the working
>     >> group explicitly decided the differences are a good thing.
> 
>     Shoichi> i dont think there are differneces between them.  because
>     Shoichi> KINK just carries IKEv1 quick mode.  KINK can establish
>     Shoichi> the same SA that IKEv1 do so.  
> 
> Section 4.3 calls out a lot of explicit detail.  For example it says
> exactly when to add SAs to the SPD, etc.  This detail is presented as
> Kink specific.
> 
> I am asking for review to confirm that this detail did not conflict
> with anything in the IKE spec.  If section 4.3 said to just do what
> IKE does, I would not have called it out.

IKE does not unfortunately specify when an implementation adds SAs
to the SAD.  And KINK's optimistic approach (2-way handshake) is
new to IKEv1.  Therefore KINK specifies it in detail.
I think the detailed description in section 4.3 is necessary.

I think SA setup sequence in 3-way handshake should also be written,
in addition to the current descriptions.

-- 
KAMADA Ken'ichi <[email protected]>