Probably IKE_INT (intermediate)? Actually I was thinking of this name when 
started writing the draft...

 

IKE_PRE_AUTH sounds to me like it is somehow bound to authentication, while in 
fact it is multi-purpose

and can be used for transferring any additional data before IKE_AUTH...

 

I do have one issue I’ve been pondering, though; we do an IKE_AUX exchange, and 
then follow it up with an IKE_AUTH exchange.  At least with my accent, those 
are phonetically quite close.  It would be nice if we could come up with an 
alternative name to IKE_AUX that was just as descriptive, but wasn’t such a 
near collision (and no, I don’t have any immediate suggestions).

 

I have the same issue when discussing the draft.  Off the top of my head, 
IKE_PRE_AUTH could work.

_______________________________________________
IPsec mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to