Hi Toerless, > Does IPsec not also include AH as an option still ?
AH is still formally a part of IPsec, but it is next to extinct in real life. I see no ambiguity in renaming the section, since the text clearly says that IKEv2+ESP is a "modern IPsec protocol suite", which is right. Regards, Valery. > On Thu, Apr 09, 2020 at 09:02:12AM +0300, Valery Smyslov wrote: > > Hi, > > > > > > draft-ietf-taps-transport-security is currently in IESG evaluation, and in > > > > its description of IKEv2 with ESP it asserts that "IKEv2 [RFC7296] and > ESP > > > > [RFC4303] together form the modern IPsec protocol suite that encrypts > > > and > > > > authenticates IP packets, either for creating tunnels (tunnel-mode) or > for > > > > direct transport connections (transport-mode)." > > > > (https://tools.ietf.org/html/draft-ietf-taps-transport-security- > 11#section- > > > 3.4.1). > > > > I don't think I see a problem with that description, but wanted to run it > > > > by the WG for a quick sanity check before the document gets approved, > in > > > > case there's something I'm forgetting. > > > > > > Looks correct and appropriate to me. > > > > I concur. > > > > However, I'd suggest changing the title of the section from "IKEv2 with > ESP" to "IPsec". > > > > Regards, > > Valery. > > > > > Paul > > > > > > > > > _______________________________________________ > > > IPsec mailing list > > > IPsec@ietf.org > > > https://www.ietf.org/mailman/listinfo/ipsec > > > > _______________________________________________ > > IPsec mailing list > > IPsec@ietf.org > > https://www.ietf.org/mailman/listinfo/ipsec _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
