Re: [IPsec] TR: New Version Notification for draft-btw-add-ipsecme-ike-01.txt

2020-09-18 Thread Benjamin Kaduk
On Fri, Sep 18, 2020 at 03:51:11PM +0300, Valery Smyslov wrote: > Hi Paul, > > > Why is this using a seperate CP payload type per encrypted DNS type? > > This means that for a DNS server supporting DoT, DoH and DoQ, it needs > > to send 3 separate payloads. Why not send 1 CP payload that contains

Re: [IPsec] Data Center changes to ESP, Re: leading versus trailing ICV

2020-09-18 Thread Michael Richardson
Michael Richardson wrote: > Hi, I finally got to watching your presentation on the IETF youtube channel. > the illustration at https://youtu.be/IrNsFAPhx-Q?t=3410, which I guess is > also at: > https://www.ietf.org/proceedings/108/slides/slides-108-ipsecme-proposed-improvements-

Re: [IPsec] TR: New Version Notification for draft-btw-add-ipsecme-ike-01.txt

2020-09-18 Thread Valery Smyslov
Hi Paul, > Why is this using a seperate CP payload type per encrypted DNS type? > This means that for a DNS server supporting DoT, DoH and DoQ, it needs > to send 3 separate payloads. Why not send 1 CP payload that contains a > bitmask specifying which services it supports? Well, from my understa