KINK and RFC2401bis

I finished reading over RFC 2401bis this morning.  By the time Kink
makes its way to the IESG, it will need to normatively reference that
document instead of RFC 2401.

The primary change is that several of the comments about the SPD
actually apply to the PAD in the 2041bis model.



There's another issue the working group needs to consider.  RFC
2401bis increases the flexibility and requirements for IPsec.  New
requirements include the ability to have multiple SAs with the same
selectors and to have port ranges in selectors.  IKEv1 which Kink is
based on does not support these features.

I'm concerned that people will expect to be able to set up SPD entries
taking advantage of such features and have them work.  I'm asking the
working group to seriously consider whether support for new IPsec
requirements should be added to Kink.  The result of this
consideration needs to be either modifications to the protocol to add
the necessary support or text explaining what features are not
supported and why the working group has chosen not to support them.

--Sam