Re: [IPsec] Split DNS in IKEv2 Configuration Payload

2015-09-24 Thread Tommy Pauly
Hello all, Based on the conversation on the IPSec list previously about supporting Split DNS in IKEv2, Paul and I have written up a draft to add support for Split DNS (as well as DNSSEC) to the configuration attributes for IKEv2. We’d like to get feedback from the working group about the level

Re: [IPsec] Split DNS in IKEv2 Configuration Payload

2015-09-24 Thread Paul Wouters
On Thu, 24 Sep 2015, Tommy Pauly wrote: We’d like to get feedback from the working group about the level of interest in this topic, and if people would like to work on adopting it. One item we were not sure about is the format of the INTERNAL_DNSSEC_TA. While a DS record is shorter and