[IPsec] Sorry, 5 more

2010-02-24 Thread Yoav Nir
Hi folks. 5 issues got lost in the system (they were tagged wrong). Hopefully these are really the last 5. Issue #132 - Should NO_ADDITIONAL_SAS cover rekeying IKE SAs? = In section 1.3 at the end there is text talking about the NO_ADDI

Re: [IPsec] Issue #173 - Trigger packets should not be required

2010-02-24 Thread Tero Kivinen
Dan McDonald writes: > Am reading this right? > > On Fri, Feb 19, 2010 at 08:22:51AM -0800, Paul Hoffman wrote: > > At 1:10 PM +0200 2/19/10, Tero Kivinen wrote: > > >Yoav Nir writes: > > >> Hi all. > > >> > > >> There are only three issues this time, because this is the last batch. > > >> > > > >

[IPsec] Sorry, 5 more

2010-02-24 Thread Tero Kivinen
Yoav Nir writes: > Issue #133 - Adding more possible notifications when rekeying Child SAs > === > (nice touch that issue #133 deals with section 1.3.3) > How about just adding the following paragraph: >The notifications descri

Re: [IPsec] [Nav6tf] FYI: NIST Publication "Guidelines for the secure deployment of IPv6"

2010-02-24 Thread Joe Klein
Ed, I started to review the NIST SP 800-119 today. My focus has been to look at the document from both the defenders and attackers prospective, as I did with the DOD IPv6 security standards. As usual with documents from Sheila Frankel, it is well written, annotated and filled allot of useful info

[IPsec] WG Action: RECHARTER: IP Security Maintenance and Extensions (ipsecme)

2010-02-24 Thread IESG Secretary
The IP Security Maintenance and Extensions (ipsecme) working group in the Security Area of the IETF has been rechartered. For additional information, please contact the Area Directors or the working group Chairs. IP Security Maintenance and Extensions (ipsecme) ---