Re: [IPsec] Labeled IPsec options

2019-12-30 Thread Paul Wouters
On Fri, 27 Dec 2019, Valery Smyslov wrote: The successful exchange of SECLABELS_SUPPORTED notification only ensures that the responder won't ignore SECLABEL notification in requests to create IPsec SAs. Over the hollidays, I tried to show weaknesses in this approach, but failed. I think Valery

Re: [IPsec] graveyard: deprecate->historic

2019-12-30 Thread Paul Wouters
On Mon, 23 Dec 2019, Benjamin Kaduk wrote: "this document" (i.e., the RFC-to-be) does not actually effecuate the move to Historic status; the separate "status-change" document does so. Looking at a recent example in RFC 8429, we see this phrased akin to "Accordingly, IKEv1 has been moved to His