>First, how should we handle cases where the protected result disagrees
>with the failure/success message?

It was my understanding that the protected response is authoritative, and
the unprotected response is ignored. Alan?

>Secondly, we should wait for the failure/success message before deciding
>whether the context is established or not?

Hmm, isn't the context establishment ultimately dependent on receipt of
the MSK? The protected response is within the tunnel, the MSK is outside
the tunnel.

Josh.



JANET(UK) is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024 
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG

_______________________________________________
abfab mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/abfab

Reply via email to