Subject: [IPsec] Issue #50: Behavior when KE payload not included

From: Yaron Sheffer <[email-masked]>
Date: Sun, 7 Dec 2008 17:09:18 +0200

1.3.2: why is KE a SHOULD, not a MUST? How is the SA generated if it is
omitted?

The room: IKE SA rekey without DH is almost pointless, better to require KE
payload.  "SHOULD" may have been inherited from CREATE_CHILD text.
Changing to "MUST" is likely course of action.

_______________________________________________
IPsec mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/ipsec