Re: issues 18, 15, 6 -- return routability

  > 
>   - Do the tests if configuration tells you to
>   - Default is on
>   - If the specific IP address can be found in the peer's certificate, 
> you can skip the test
> 
I am okay with the first two. I must have missed the discussion on the
address found in the peer's certificate.. What address ? Can you give
some more details ?

> Issue 18 is about when to do the tests, before or after you
> have moved the payload traffic stream. Again there seemed
> to be opinions on both sides. Before is more secure, after
> is faster. OTOH, in situations where you have well-behaving
> peers, as in most VPNs the efficiency may not be an issue
> if you turned this feature off to begin with. The proposal on the slides
> was
> 
>   - Do the tests before moving the payload stream.
> 
Sounds good.

-mohan

> Let us know if these proposals work for you or if a different
> approach is needed.
> 
> --Jari
> 
> _______________________________________________
> Mobike mailing list
> [email protected]
> https://www.machshav.com/mailman/listinfo.cgi/mobike