Re: [Ipsec] Reauthentication in IKEv2

[Bill Sommerfeld <sommerfeld at sun.com>]

On Wed, 2004-11-10 at 20:27, Geoffrey Huang wrote:

> I can see arguments from both sides, I guess.  Even with your re-auth 
> scheme, a value of "0" seconds could mean "do it now," right?

I'd think so; I'd also hope that the encoding should also allow for
"reauth in 8 hours" notifications as well.

As was pointed out in the secsh working group yesterday for a related
user-authentication timeout, there are also accessibility concerns here;
some people enter text *very* slowly; 3 minutes may not be sufficient
for some.  

						- Bill




_______________________________________________
Ipsec mailing list
Ipsec at ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec