Vukasin, > Any thoughts from an implementer's standpoint?
Unfortunately no, no special thoughts. All proposed solution seem to be more or less simple to implement/add to existing implementation. In my humble opinion (I'm a GSoC student), the Valery Smyslov proposal is very clever. But I don't know whether it is "worth the trouble" doing that because of the one corner case we found. I would also point out that currently libreswan aborts the negotiation if it comes to this situation. Regards, Vukasin Karadzic
_______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec