Re: AD review: draft-ietf-kink-kink [section 1-4]
Michael Thomas <[email protected]> Fri, 04 Feb 2005 06:50:18 -0800
| Newsgroups | gmane.ietf.kink |
|---|---|
| Organization | Cisco Systems |
| Message-ID | <[email protected]> |
On Fri, 2005-02-04 at 00:04, KAMADA Ken'ichi wrote: > IKE does not unfortunately specify when an implementation adds SAs > to the SAD. And KINK's optimistic approach (2-way handshake) is > new to IKEv1. Therefore KINK specifies it in detail. > I think the detailed description in section 4.3 is necessary. > > I think SA setup sequence in 3-way handshake should also be written, > in addition to the current descriptions. Right -- this was one of the huge deficiencies of IKE which we were very intent to deal with. KINK is actually has a *lot* of things corrected -- things that we hopefully also corrected in IKEv2. Which is why it's so annoying when it is suggested that KINK do it the IKEv2 way -- KINK led the way here, not the other way around. KINK should have been an RFC way before IKEv2 was issued. Mike
signature.asc
(application/pgp-signature, 307 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iQCVAwUAQgOLqbMsDAj/Eq++AQKmLgQAl71QZRUDkkoPNGTATSnL2UyJnim45LEZ xj3y8LlBzi7rviF1zYzHzJzRU3i3Momv1nOMnQA6nHTJk5vMR0qK/UE91UA2D24D hcIOuFME7Nc6Phnx+7X1WhIwVvfdCgYvPYqUyoEmaeaYm+kAgz7p/DnLokkJeISx dlcbf3lyejE= =jWhC -----END PGP SIGNATURE-----