Re: [IPsec] WGLC of draft-ietf-ipsecme-labeled-ipsec

2021-12-15 Thread Paul Wouters
On Thu, 9 Dec 2021, Tobias Brunner wrote: In the SELinux case, and using your example, could the client actually propose "nfs-client in TSi and "nfs-server" in TSr? So the server could set "nfs-client" on the inbound SA/policy and "nfs-server" on the corresponding outbound SA/policy of the CH

[IPsec] WG Adoption call for draft-btw-add-ipsecme-ike

2021-12-15 Thread Tero Kivinen
Tero Kivinen writes: > This is the start of 2 week WG adoption call for this document, ending > 2021-11-22. Please send your reply about whether you support adopting > this document as WG document or not. We had some discussion on the mechanims defined in this draft, but there was also lots of sup

[IPsec] WG adoption call for draft-smyslov-ipsecme-ikev2-auth-announce

2021-12-15 Thread Tero Kivinen
Tero Kivinen writes: > This is the start of 2 week WG adoption call for this document, ending > 2021-11-22. Please send your reply about whether you support adopting > this document as WG document or not. There was much less support for this, but I think there is enough interest in the WG to at le

[IPsec] IPsecME WGLC documents

2021-12-15 Thread Tero Kivinen
We currently have two documents in the WGLC: draft-ietf-ipsecme-g-ikev2: Group Key Management using IKEv2 and draft-ietf-ipsecme-rfc8229bis: TCP Encapsulation of IKE and IPsec Packets Both of those documents have very little reviews or comments during the WGLC, and I would like to get at least