On Feb 8, 2015, at 3:21 PM, Yaron Sheffer <[email protected]> wrote: > Yes, of course. It just needs to verify the integrity (MAC) of the received > ticket (as easy or easier than our proposed puzzle verification), and then > the rest of the exchange is lighter-weight than a typical IKE exchange. See > http://tools.ietf.org/html/rfc5723#section-4.3.2.
I knew the latter part, but I was more concerned about the former. As long as the verification is no harder than the proposed puzzles, then yes, resumption seems like a good addition. I wanted to be sure that it wasn't harder. --Paul Hoffman _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
