On Mon, 12 Sep 2022, mohamed.boucad...@orange.com wrote:
Thanks for the feedback.
The initial reasoning was to be tolerant to some misbehaving initiators that
might send a mix of empty and no empty attributes (which is odd) and for which
empty attribute will win because we do already have:
Re-,
OK, let's then test this change: https://tinyurl.com/add-ike-latest. Better?
I don't think we need to touch the responder side as we already gave a
provision to accommodate policies.
Cheers,
Med
> -Message d'origine-
> De : Paul Wouters
> Envoyé : lundi 12 septembre 2022 14:45
On Mon, 12 Sep 2022, mohamed.boucad...@orange.com wrote:
OK, let's then test this change: https://tinyurl.com/add-ike-latest. Better?
I don't think we need to touch the responder side as we already gave a
provision to accommodate policies.
Yes, both are fine with me. thanks!
Paul
_
Re-,
Deal! The new version with the changes will be made pubic SOON.
Cheers,
Med
> -Message d'origine-
> De : IPsec De la part de Paul Wouters
> Envoyé : lundi 12 septembre 2022 15:31
> À : BOUCADAIR Mohamed INNOV/NET
> Cc : Paul Wouters ; Valery Smyslov
> ; ipsec@ietf.org; 'Tero Kivi
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the IP Security Maintenance and Extensions WG of
the IETF.
Title : Internet Key Exchange Protocol Version 2 (IKEv2)
Configuration for Encrypted DNS
Authors
