Re: [IPsec] Split DNS in IKEv2 Configuration Payload

2015-07-31 Thread Tommy Pauly
On Jul 30, 2015, at 3:08 AM, Paul Wouters p...@nohats.ca wrote: On Thu, 30 Jul 2015, Tero Kivinen wrote: Paul Wouters writes: Should such a document include a section on client usage or just specify the payload formats? If such document is written, it has to defined client usage for

Re: [IPsec] Split DNS in IKEv2 Configuration Payload

2015-07-31 Thread Tero Kivinen
Tommy Pauly writes: On the topic of DNS caching, I think the draft could give recommendations that the cache for a domain assigned to the IKEv2 connection should be flushed, but would not need to go into implementation details. From the perspective of our clients (Mac and iOS), all VPN types