Re: [IPsec] Issue #107

To: Tero Kivinen <kivinen at iki.fi>, Yoav Nir <ynir at checkpoint.com>
Subject: Re: [IPsec] Issue #107
From: Paul Hoffman <paul.hoffman at vpnc.org>
Date: Mon, 11 May 2009 08:09:24 -0700
Cc: "ipsec at ietf.org" <ipsec at ietf.org>
Delivered-to: ipsec at core3.amsl.com
In-reply-to: <18952.6309.950313.942432 at fireball.kivinen.iki.fi>
List-archive: <http://www.ietf.org/mail-archive/web/ipsec>
List-help: <mailto:ipsec-request@ietf.org?subject=help>
List-id: Discussion of IPsec protocols <ipsec.ietf.org>
List-post: <mailto:ipsec@ietf.org>
List-subscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
List-unsubscribe: <https://www.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
References: <7ccecf670904212100o5ee2fe2dydb4bfdba2f414b4b at mail.gmail.com> <99043b4a0904212310q1f0b1a2em7aed8b5114791f45 at mail.gmail.com> <99043b4a0904212310y4572a41dy32c4da6b63580f52 at mail.gmail.com> <7ccecf670904212328u67fd961cj33dd1d0b4bb0be6a at mail.gmail.com> <99043b4a0904212337w11be053cg480f80592a6c513e at mail.gmail.com> <99043b4a0904212338l74e47c3ftae1b7a14aa8db5b6 at mail.gmail.com> <7ccecf670904212351n6494a683x87384b409d14d9c2 at mail.gmail.com> <9FB7C7CE79B84449B52622B506C780361338597890 at il-ex01.ad.checkpoint.com> <4A009310.2020904 at sandelman.ca> <9FB7C7CE79B84449B52622B506C780361338598109 at il-ex01.ad.checkpoint.com> <7600.1241614739 at marajade.sandelman.ca> <9FB7C7CE79B84449B52622B506C7803613385981A8 at il-ex01.ad.checkpoint.com> <18946.45275.605400.566221 at fireball.kivinen.iki.fi> <9FB7C7CE79B84449B52622B506C780361338598395 at il-ex01.ad.checkpoint.com> <18952.6309.950313.942432 at fireball.kivinen.iki.fi>

At 3:23 PM +0300 5/11/09, Tero Kivinen wrote:
>There is text about this in multiple places in the RFC4306. 

...barely. It is only clear in section 1.2, not in subsections of Section 3. The topic of cert chains is barely discussed. I will clear this up in the next draft.

--Paul Hoffman, Director
--VPN Consortium

References:
- [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: raj singh
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Matthew Cini Sarreo
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: raj singh
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Matthew Cini Sarreo
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: raj singh
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Yoav Nir
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Michael Richardson
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Yoav Nir
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Michael Richardson
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Yoav Nir
- Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
  - From: Tero Kivinen
- [IPsec] Issue #107
  - From: Yoav Nir
- [IPsec] Issue #107
  - From: Tero Kivinen

Prev by Date: Re: [IPsec] IV in ESP packets for AES-CBC and AES-CTR methods
Next by Date: Re: [IPsec] Issue #107
Previous by thread: Re: [IPsec] Issue #107
Next by thread: Re: [IPsec] [IKEv2] IKE_AUTH without TSi, TSr
Index(es):
- Date
- Thread

Re: [IPsec] Issue #107

Note: Messages sent to this list are the opinions of the senders and do not imply endorsement by the IETF.