Re: [IPsec] New Version of Split DNS for IKEv2

2016-12-15 Thread Tommy Pauly
Hi Daniel, Thanks for the review comments! Responses inline. Tommy > On Dec 13, 2016, at 10:46 AM, Daniel Migault > wrote: > > Hi, > > Please find my comments on draft-pauly-ipsecme-split-dns-02. > > Yours, > Daniel > > > 3. Protocol Exchange > > 3.1.

Re: [IPsec] New Version of Split DNS for IKEv2

2016-12-13 Thread Daniel Migault
Hi, Please find my comments on draft-pauly-ipsecme-split-dns-02. Yours, Daniel 3. Protocol Exchange 3.1. Configuration Request An initiator MAY convey its current DNSSEC trust anchors for the domain specified in the INTERNAL_DNS_DOMAIN attribute. If it does not wish to convey

[IPsec] New Version of Split DNS for IKEv2

2016-09-21 Thread Tommy Pauly
Hello all, We've posted a new version of draft-pauly-ipsecme-split-dns (https://tools.ietf.org/html/draft-pauly-ipsecme-split-dns-02). The changes in this version include: - Textual clarification based on input from Daniel and Tero - Clarification of DNSSEC payload types - Update on