On Sep 15, 2011, at 3:52 AM, <[email protected]> <[email protected]> 
wrote:

> Should this be added to IPSec?  It’s not clear to me that proliferation of 
> ciphers is helpful.  A small set of very well vetted ciphers is better than a 
> larger set that add others without a strong track record.

IPsec (and IKE) allow the addition of new ciphers without those ciphers being 
considered "part of" IPsec. That is, no one should feel compelled to implement 
every cipher for which there is an RFC and a number in the registry.

This document is currently not being considered as a WG item. The authors have, 
correctly, proposed it as an informational submission.

--Paul Hoffman

_______________________________________________
IPsec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to