[IPsec] I-D Action: draft-ietf-ipsecme-add-ike-06.txt

2022-09-12 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the IP Security Maintenance and Extensions WG of the IETF. Title : Internet Key Exchange Protocol Version 2 (IKEv2) Configuration for Encrypted DNS Authors

Re: [IPsec] New Version Notification for draft-ietf-ipsecme-add-ike-04.txt

2022-09-12 Thread mohamed.boucadair
Re-, Deal! The new version with the changes will be made pubic SOON. Cheers, Med > -Message d'origine- > De : IPsec De la part de Paul Wouters > Envoyé : lundi 12 septembre 2022 15:31 > À : BOUCADAIR Mohamed INNOV/NET > Cc : Paul Wouters ; Valery Smyslov > ; ipsec@ietf.org; 'Tero Kivi

Re: [IPsec] New Version Notification for draft-ietf-ipsecme-add-ike-04.txt

2022-09-12 Thread Paul Wouters
On Mon, 12 Sep 2022, mohamed.boucad...@orange.com wrote: OK, let's then test this change: https://tinyurl.com/add-ike-latest. Better? I don't think we need to touch the responder side as we already gave a provision to accommodate policies. Yes, both are fine with me. thanks! Paul _

Re: [IPsec] New Version Notification for draft-ietf-ipsecme-add-ike-04.txt

2022-09-12 Thread mohamed.boucadair
Re-, OK, let's then test this change: https://tinyurl.com/add-ike-latest. Better? I don't think we need to touch the responder side as we already gave a provision to accommodate policies. Cheers, Med > -Message d'origine- > De : Paul Wouters > Envoyé : lundi 12 septembre 2022 14:45

Re: [IPsec] New Version Notification for draft-ietf-ipsecme-add-ike-04.txt

2022-09-12 Thread Paul Wouters
On Mon, 12 Sep 2022, mohamed.boucad...@orange.com wrote: Thanks for the feedback. The initial reasoning was to be tolerant to some misbehaving initiators that might send a mix of empty and no empty attributes (which is odd) and for which empty attribute will win because we do already have: