Vukasin,
> Any thoughts from an implementer's standpoint?

Unfortunately no, no special thoughts. All proposed solution seem to be
more or less simple to implement/add to existing implementation.

In my humble opinion (I'm a GSoC student), the Valery Smyslov proposal is
very clever. But I don't know whether it is "worth the trouble"
doing that because of the one corner case we found.

I would also point out that currently libreswan aborts the negotiation if
it comes to this situation.

Regards,
Vukasin Karadzic
_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www.ietf.org/mailman/listinfo/ipsec

Reply via email to