Re: #29 [*](2401bis) Rekeying (section 4.4.1)

On Tue, 2005-02-15 at 02:07, Kazunori Miyazawa wrote:

> Normally a KINK implementation which rekeys existing security associations will
> start to rekey the security association at the soft lifetime. In order to avoid
> synchronization with similar implementations, KINK initiators MUST randomly pick
> a rekeying time between the soft lifetime and the hard lifetime minus the amount
> of time it would take to go through a full retransmission time cycle, Tretrans.
> The soft lifetime SHOULD be set at least twice Tretrans before the hard lifetime.

Another way to phrase this: "the soft lifetime must be randomized to avoid synchronization.."

						- Bill