Re: comments on draft-ike-mobike-design-03.txt

Francis Dupont <[email protected]> Mon, 29 Aug 2005 15:08:02 +0200

Newsgroups	gmane.ietf.mobike
Message-ID	<[email protected]>

 In your previous mail you wrote:

   I read draft-ike-mobike-design-03.txt and had a few comments/questions
   as below:
   
   Technical Comments:
   
   - Section 4, fourth paragraph, it says "Using this API, the MOBIKE
     daemon can create entries in the Security Association (SAD) and
     Security Policy Databases (SPD)." I believe "this API" refers to
     PF_KEY which is initially designed as an interface to SAD. So, the
     draft should be accurate in this respect, IMHO.

=> PF_KEY can't offically be used to manage the SPD so IMHO the
current wording should be kept.

   - Section 5.8 (Scope of SA changes), I think this is very important
     issue. Separate management of IKE SA and IPsec SA in terms of address
     update allows us more flexible and (potentially) user-friendly
     operation although there will be more complexity and overhead to
     do so.
   
=> I agree on both: it is an important issue and the current decision is bad.

Regards

[email protected]