On Oct 23, 2017, at 12:25 PM, Ralph Droms <rdroms.i...@gmail.com> wrote: > Is there running code that demonstrates the IPsec+IKE can be deployed and > operated at scale in the sort of environment the enterprise network tips have > described to us?
Is there running code that demonstrates that draft-rhrd-tls-tls13-visibility-00 can be deployed and operated at scale? :) In fact, when I went looking at the state of the art for IKE/IPsec after our conversation in Prague, I was pleasantly surprised at how usable it is. I don't know if it currently scales up as you suggest, but it certainly can in principle. This is why I'm suggesting that resources be spent doing that, rather than in limiting the ability of TLS 1.3 to address its use case, which is a different use case.
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls