Subject: [AAA-WG]: [Issue]: Diameter hop-by-hop security

From: Bernard Aboba <[email-masked]>
Date: Fri, 21 Sep 2001 08:44:37 -0700 (PDT)

Submitter name: Bernard Aboba
Submitter email address: [email-masked]
Date first submitted: 9/19/01
Document: base-07
Comment type: Technical
Priority: Must fix
Section: 2.2 Securing Diameter Messages
Explanation of issue: There is a mismatch between security support
required on the client and on the server. Diameter clients MUST support
IPsec, and MAY support TLS. Yet, Diameter Servers MUST support TLS, and
MAY support IPsec. Thus, compliant Diameter clients & servers won't
necessarily interoperate. 
Requested change: 
Change text to: Diameter Servers MUST support TLS and IPsec.