Yoav Nir <[email protected]> wrote: > - also by Valery Inter-domain source address validation using RPKI and > IPsec (draft-xu-risav and draft-xu-erisav) - by Yangfei Guo
Based upon conversations on the list, this proposal might not even be IPsec. At least, it's not proto=50(ESP)/51(AH), as they are asking for a new extension header type. The proposal would require allocation of a SPI for a destination address which is not the receiving system of the SA. It would be negotiated with IKEv2, but that part seems neither here nor there. I don't object to discussing it in IPSECME. I think it's a good idea to do SOMETHING. I think that it's very SR6-ish, and since it is cross-AS, I can't see how 6man will approve. It might be appropriate to at least ask SECDISPATCH. -- Michael Richardson <[email protected]>, Sandelman Software Works -= IPv6 IoT consulting =-
signature.asc
Description: PGP signature
_______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
