IPSec in 2.5 Kernel?

John S. Denker writes:
 > What would it take to get state-of-the-art IPsec into
 > the mainline kernel development process?
 > 
 > What's the right forum for discussing this?

Probably the linux-net mailing-list, that's where the Linux 2.5 IPsec
code was announced/discussed in the past.  However, given that the
kernel is supposed to be in feature freeze then reworking the IPsec to
be mast based might be considered too large a change.  One way to sway
the decision making process is to submit patches that implement the
desired feature.  If it works and they like it, they can always claim
that it is an "optimisation" of an existing feature and hence include
it (that's how some other things have snuck in).