Re: [IPsec] I-D Action:draft-ietf-ipsecme-failure-detection-01.txt

2010-10-10 Thread Yaron Sheffer
There's a typo in Sec. 3, "These are the final IKE_AUTH request..." should be "the first". More importantly, I think this new text is a bit wimpy... "To ensure this, token makers MUST use a good pseudo-random number generator to generate the IKE SPIs." I would have preferred "To ensure this, t

Re: [IPsec] I-D Action:draft-ietf-ipsecme-failure-detection-01.txt

2010-10-10 Thread Yoav Nir
Hi all This version resolves issues #189, #190, #191, and #192. Also the content of section 9.3 has been moved to section 10.4 because, as Frederic pointed out, it's more a security considerations than operational. Yoav On Oct 10, 2010, at 10:30 AM, wrote: > A New Internet-Draft is availa

[IPsec] I-D Action:draft-ietf-ipsecme-failure-detection-01.txt

2010-10-10 Thread Internet-Drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Security Maintenance and Extensions Working Group of the IETF. Title : A Quick Crash Detection Method for IKE Author(s) : Y. Nir, et al. Fil