[IPsec] New email address

2010-03-16 Thread Yaron Sheffer
Hi everyone, I am leaving Check Point within the next few weeks. For the time being, I will be using this address: yaronf.i...@gmail.com. Unfortunately I will not be coming to Anaheim next week, instead I will make the best of the WebEx facilities. Wishing you all a good meeting in sunny Cal

Re: [IPsec] Response to Pasi's AD comments on the roadmap draft

2010-03-16 Thread Pasi.Eronen
Paul Hoffman wrote: > > > > - Section 5.7.4: "It also includes 3 EC DH groups (groups 19-21) > >> > that were previously defined in [RFC4753]". The normative > >> > specification for groups 19-21 in IKE is still 4753/5753bis, so I > >> > would propose just omitting this sentence. > >> > >> OK

Re: [IPsec] Response to Pasi's AD comments on the roadmap draft

2010-03-16 Thread Paul Hoffman
At 1:38 PM +0100 3/16/10, wrote: >Paul Hoffman wrote: > >> > > > - Section 5.7.4: "It also includes 3 EC DH groups (groups 19-21) >> >> > that were previously defined in [RFC4753]". The normative >> >> > specification for groups 19-21 in IKE is still 4753/5753bis, so I >> >> > would propose ju

Re: [IPsec] Still incorrect understanding of PF_KEY in ikev2bis-08

2010-03-16 Thread Paul Hoffman
[[ This message has gotten no replies. I am far from a PF_KEY expert, and need to hear from the WG before proceeding. --Paul Hoffman ]] At 4:34 PM -0500 3/2/10, Dan McDonald wrote: >Even as of draft-08, section 2.9: > > When an RFC4301-compliant IPsec subsystem receives an IP packet that > ma